HollowGraph malware utilizes Microsoft 365 calendar for command and control

The HollowGraph malware toolkit leverages compromised Microsoft 365 accounts to establish two-way communication via calendar events, functioning as a dead-drop mechanism. This technique complicates detection by blending malicious traffic with legitimate enterprise productivity software activity.