Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware ...