There's a rash of scam spam coming from a real Microsoft address

Official GitHub addresses are also often abused by scammers. They create a GitHub Issue with the text they want, then ping every single user they could find under that issue. The users receive an email with the text of the issue from an official GitHub email, with only tiny font text at the bottom indicating that it's actually an issue and not an official message.