HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels

HOLLOWGRAPH is a highly targeted espionage malware that covertly abuses Microsoft 365 calendar events via the Microsoft Graph API and DNS tunneling to exfiltrate data and receive commands, blending malicious activity within legitimate cloud traffic and primarily targeting Israeli entities.