THERE'S A RASH OF SCAM SPAM COMING FROM A REAL MICROSOFT ADDRESS

Summary from the TLDR InfoSec newsletter

A legitimate Microsoft Power BI email address is being abused to send fake $399 billing alerts that push victims to call a number and install remote-access tools, handing attackers control of their computers. Scammers exploit Power BI's subscription feature so messages come from a trusted Microsoft domain with no malicious links, bypassing filters until Microsoft temporarily disabled the abused feature.