Researchers discovered a large-scale campaign using the open-source penetration testing framework that has targeted more than 80,000 Microsoft accounts.