Cybercriminals are bypassing mail spam filters by hiding documents with a malicious link in SharePoint Online.