A major phishing campaign is exploiting a trusted security feature to deliver thousands of fake SharePoint and e-sig notifications that appear authentic.