We see phishing campaigns all the time--dedicated, long-standing attempts to hit end-users.
In this video, we detail some of these campaigns that are being sent via Microsoft 365: