The malicious Internet Information Services module makes Outlook on the web a cybercriminal tool.