> TritonInfoSec News
Home / Jul 22, 2026 / Story
0
#10 The Hacker News general July 20, 2026 at 14:33 UTC

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

By [email protected] (The Hacker News)

AI Summary

Group-IB disclosed HollowGraph, a new espionage implant that uses a hijacked Microsoft 365 calendar as its C2 channel, embedding operator commands and exfiltrating stolen files as attachments on calendar events dated to the year 2050. By routing all activity through legitimate Microsoft Graph API calls, the malware blends into normal Microsoft 365 traffic and evades network-based detection.

Read full article → https://thehackernews.com/2026/07/hollowgraph-malw…

Relevance score: 80.0/100

# More from July 22

  1. 1
    Critical SharePoint RCE flaw exploited to steal machine keys BleepingComputer
  2. 2
    Critical wp2shell WordPress flaws exploited to install webshells BleepingComputer
  3. 3
    Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access The Hacker News
  4. 4
    SonicWall SMA1000 flaws exploited as zero-days to push custom malware BleepingComputer
  5. 5
    Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution The Hacker News
  6. 6
    FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware BleepingComputer
  7. 7
    Police dismantle Kratos phishing platform, arrest developer BleepingComputer
  8. 8
    New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack The Hacker News
  9. 9
    Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes BleepingComputer