Microsoft observed malicious activity targeting and stealing credentials from Microsoft customers.