More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, according to new…