Cybercriminals are using hijacked SharePoint servers to send dangerous notifications.