Hackers behind the SolarWinds attack gained access to the email system of a US aid agency, says Microsoft.