This new phishing attack is ‘sneakier than usual’, Microsoft warns