Microsoft is warning Outlook on the Web and Exchange Server customers to watch out for more malicious IIS extensions.