Spammers hijack Microsoft subdomains to advertise poker casinos. Many other subdomains have been vulnerable for years.

Source: ZDNet