HOLLOWGRAPH Hides Malware C2 in Microsoft 365 Calendars
HOLLOWGRAPH uses Microsoft Graph, 2050 calendar events and DNS tunneling for C2 and exfiltration. Review confirmed TTPs, IOCs and detection.
All articles in the Malware category on the Breachroad blog: analyses, guides and recommendations for businesses.
HOLLOWGRAPH uses Microsoft Graph, 2050 calendar events and DNS tunneling for C2 and exfiltration. Review confirmed TTPs, IOCs and detection.
GigaWiper combines remote access, espionage and three data-destruction paths. Review confirmed IOCs, detection logic and a Windows recovery plan.
Operation Endgame targeted 326 servers and 142 domains linked to SocGholish, Amadey and StealC. What the action achieved and defenders should do.
Infostealers are the most common malware stealing passwords, cookies and wallets. How they infect, why they bypass MFA and how to protect yourself.
Book a free consultation. We'll talk about your infrastructure and real priorities.