Microsoft 365 calendars become spy drop boxes in HOLLOWGRAPH campaign

Microsoft 365 calendars have become the latest hiding place for espionage malware, with attackers stashing commands and stolen files inside appointments dated 24 years into the future. Researchers at Group-IB say they've uncovered a malware component they call HOLLOWGRAPH that swaps the usual command-and-control server for …

[Number6]

How appropriate. 13th May 2050 is a Friday. Just the day for bad luck.

[David 132]

In light of this article, I've just glanced at May 13th 2050 in my corporate Outlook calendar.

No sign of this malware's activity (our IT dept is pretty on-the-ball wrt threats) but I was disproportionately depressed to see that I have a Staff meeting at 11AM on that day. I do wish colleagues would learn to set the "recurrence ends" date when creating new meetings. Either that, or my frail old age is going to be even more tedious and unproductive than anticipated :)

[Flightmode]

I feel you, man. Have one of these.

[Paul Herber]

Don't ignore the power and persistence of meetings. The day after the heat death of the universe there will be a sales and marketing meeting to discuss how it all went and to find out how customers related to it.

[Jou (Mxyzptlk)]

I have seen the MS-graph authentification, so this does not surprise me

How the hell it that expected to be secure. I had to implement it as "App-ID" last week in a script to replace an older script which still used secure SMTP with auth. And boy, that is bad implementation, several steps back from a secure SMTP connection with auth. No surprise there are so many MS-cloud hacks using MS-Graph...

[ecofeco]

Re: I have seen the MS-graph authentification, so this does not surprise me

It's crazy that any of that is needed at all.