A new phishing scam uses 1,000 domains to steal Microsoft 365 logins fast. See how these attacks work and ways to stay safe.