Fortinet warns of sophisticated phishing campaign exploiting Microsoft 365 domains