Russian cybercriminals are targeting Microsoft 365 accounts with specialized malware, the UK government's cybersecurity arm has warned.