Scammers are abusing an internal Microsoft account to send spam links. The account is typically used for genuine account alerts. Spammers send emails from a legitimate Microsoft email address.