Microsoft warns of widespread open redirection phishing attack which Defender can block, coincidentally