These emails come from an official Microsoft address, thus bypassing the spam filter. Microsoft is investigating the incident ...