Microsoft 365 features that help users manage their subscriptions, account settings, and billing information.
Microsoft has to decide how to allocate programming and other resources to tackle any problem. This is not an insignificant issue to address. They need additional pressure to determine this is worth fixing.
Start reporting these spam emails to RBL systems (Spamhaus, Mailspike, Abusix, and Spamcop).
Maybe just pick one, and stick to it, and recommend to others to use that one RBL to hopefully centralize the impact.
Can you imagine how quickly MS would address this if they got blacklisted?
Yes, the cynic in me shouts, MS will just pick up the phone and call the RBL and in their own special, way, suggest that the RBL be removed....
But who knows, maybe one of these RBL's is less susceptible to MS strong arming.