Microsoft services were abused in a new phishing campaign that targeted energy firms using malicious SharePoint links.