A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data. [...]
New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
Summary + source link. No paywalls, no tracking.