Microsoft says attackers used AI-generated code in a phishing campaign, disguising an SVG file as a PDF document to trick email recipients into opening it.