⤷ Title: HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 08:08:43 +0000
════════════════════════
⌗ Tags: #Malware #calendar C2 #Cavern framework #cyber_espionage #DNS tunneling #HOLLOWGRAPH malware #Lyceum #Microsoft 365 Security #Microsoft Graph API abuse
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 20 Jul 2026 08:08:43 +0000
════════════════════════
⌗ Tags: #Malware #calendar C2 #Cavern framework #cyber_espionage #DNS tunneling #HOLLOWGRAPH malware #Lyceum #Microsoft 365 Security #Microsoft Graph API abuse
Daily CyberSecurity
HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars
At a glance Malware family HOLLOWGRAPH, linked with high confidence to the Cavern backdoor framework Threat actor Unattributed. Low-confidence possible link to Lyceum, an Iranian-nexus group and O…