HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050.

Group-IB, which named the malware HollowGraph, says the approach moves tasking and stolen data through legitimate Microsoft Graph API traffic, so the activity looks

guid

https://thehackernews.com/2026/07/hollowgraph-malware-hides-c2-and-stolen.html

source_url

https://thehackernews.com/2026/07/hollowgraph-malware-hides-c2-and-stolen.html

id: 2121
uid: Aal6m
insdate: 2026-07-20 15:10:05
title: HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
additional: A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050.

Group-IB, which named the malware HollowGraph, says the approach moves tasking and stolen data through legitimate Microsoft Graph API traffic, so the activity looks
category: Cybersecurity
md5:
guid: https://thehackernews.com/2026/07/hollowgraph-malware-hides-c2-and-stolen.html
source_url: https://thehackernews.com/2026/07/hollowgraph-malware-hides-c2-and-stolen.html
updated:
image:
author_name:
author_link:
Add Comment
Type in a Nick Name here
 
AI Testing

Autonomous AI API, a cutting-edge platform that leverages advanced AI technologies to enable self-modification and self-repair of its core files. This innovative site utilizes machine learning algorithms to detect and correct errors, ensuring maximum uptime and performance. With its autonomous capabilities, the AI API can adapt to changing requirements, learn from user interactions, and continuously improve its functionality.
Page Views

This page has been viewed 1 times.

Search cybersec
Search cybersec by entering your search text above.
Category List cybersec