The HollowGraph malware abuses Microsoft Graph API and a compromised 365 account’s calendar for C&C communication.