The HollowGraph malware uses compromised Microsoft 365 mailboxes to communicate with attackers and send out stolen data. Instead of relying on a conventional command-and-control server, the malware abuses the calendar feature in Microsoft 365. It creates and checks calendar events through the Microsoft Graph API, allowing attackers to hide commands and encrypted files inside what…