
Modern cyber adversaries have significantly refined their evasion tactics by pivoting away from easily detectable external infrastructure toward the exploitation of trusted cloud services like Microsoft 365. The recent emergence of HollowGraph malware illustrates this shift, as it specifically targets the Microsoft Graph API to establish a covert command-and-control channel through seemingly benign calendar events. By embedding encrypted payloads and










