Security researchers detected several phishing campaigns that leveraged a Google Docs Form to target users' Microsoft credentials.