A researcher has found a way to impersonate Microsoft corporate email accounts, which could make phishing attacks harder to spot.