Storia in 5 fonti

Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign

Malware hides commands in appointments set for 2050 and uses Redmond's own cloud to phone home

Raccontata da

Confronto fonti

5 prospettive sulla stessa storia

AI · summaries

theregister.comStai leggendo1 mese fa

Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign

Malware hides commands in appointments set for 2050 and uses Redmond's own cloud to phone home

originale

Timeline cronologica

lunedì 20 luglio 2026·thehackernews.com
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
HollowGraph uses Microsoft 365 calendar events dated to 2050 to receive commands and exfiltrate encrypted files through legitimate Graph API traffic.
lunedì 20 luglio 2026·theregister.com
Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign
Malware hides commands in appointments set for 2050 and uses Redmond's own cloud to phone home

thehackernews.com

1 mese fa

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

HollowGraph uses Microsoft 365 calendar events dated to 2050 to receive commands and exfiltrate encrypted files through legitimate Graph API traffic.

Leggi questa versione → originale

dev.to1 mese fa

HollowGraph Malware Uses Microsoft 365 Calendar Events as Dead-Drop C2 Channel

HollowGraph malware hides C2 commands and exfiltrated data inside encrypted Microsoft 365 calendar events dated 2050, using the Graph API to blend into legitimate cloud traffic.

Leggi questa versione → originale

securityweek.com1 mese fa

New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication

The HollowGraph malware abuses Microsoft Graph API and a compromised 365 account’s calendar for C&C communication.

Leggi questa versione → originale

bleepingcomputer.com1 mese fa

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data.

Leggi questa versione → originale

lunedì 20 luglio 2026·

bleepingcomputer.com

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and…

lunedì 20 luglio 2026·

dev.to

HollowGraph Malware Uses Microsoft 365 Calendar Events as Dead-Drop C2 Channel

HollowGraph malware hides C2 commands and exfiltrated data inside encrypted Microsoft 365 calendar events dated 2050, using the Graph API to blend into legitimate cloud traffic.

martedì 21 luglio 2026·

securityweek.com

New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication

The HollowGraph malware abuses Microsoft Graph API and a compromised 365 account’s calendar for C&C communication.