HOLLOWGRAPH Malware Hides in Microsoft 365 Calendar Events
HOLLOWGRAPH uses Microsoft 365 calendar events dated 2050 for command-and-control and file theft. Check Graph activity, logAzure.txt, and DNS telemetry.
Gridinsoft security desk
Fresh malware news, scam explainers, removal guides, browser fixes, and field notes from the Gridinsoft research team. Start with the alert, then move to the fix.
HOLLOWGRAPH uses Microsoft 365 calendar events dated 2050 for command-and-control and file theft. Check Graph activity, logAzure.txt, and DNS telemetry.
Symantec documented a Spirals ransomware attack that moved from an exposed IIS server to network-wide encryption in under…
Starland RAT hides in trojanized Zoom, WebEx, and other Windows installers. Check persistence, scan the PC, and secure…
aka.ms is Microsoft’s short-link domain, but each alias still hides a destination. Learn how to check the exact host, reveal redirects, interpret…
A vgk.sys BSOD usually points to Riot Vanguard, a driver conflict, or Intel instability—not malware. Verify the file and follow safe isolation…
Static analysis of a suspicious Payment to Bank Details DOCX attachment with a broken altChunk/RTF import chain, missing payload part, and no proven callback.
Old Favorites and .url shortcuts can be flagged when saved sites become phishing, scam, or adware…
A technical analysis of an SF Express e-invoice HTML attachment that steals email passwords through Telegram…
Runechat.com is flagged as phishing with a 3/100 trust score. Learn why not to log in,…
Is Echo.ac malware? Learn when Echo Anti-Cheat is legitimate, why echo_driver.sys needs verification, and what to…
SocGholish, also called FakeUpdates, uses fake browser update prompts on compromised sites. Learn what to do…
Learn what Trojan.Malware.300983.susgen means in VirusTotal results, when it is likely a false positive, and when…
Seeing Behavior:Win32/BrowserKill.A!MTB in Microsoft Defender? Learn what the alert means, what to check in cmd.exe and…
Neshta.Virus.FileInfector.DDS is a file-infector alert. Learn what a Recycle Bin hit means, what to check, when…
Troubleshooting
Google signed you out and mentioned malware? Verify the warning, secure the account from…
Troubleshooting
Downloaded or ran a SteamUnlocked game? Match the cleanup to what happened, remove the…
Mobile Security
Marowhome.com opens by itself on an Infinix, Tecno, or itel phone? See what is…
Troubleshooting
Fix a Windows Script Host missing-file popup by tracing the startup entry or scheduled…
Troubleshooting
Fix a Microsoft Defender Offline scan that does not start, only restarts Windows, or…
Troubleshooting
Error 225 or 0x800700E1 means Windows blocked a file as malware or potentially unwanted…
Troubleshooting
Windows 11 proxy settings keep changing back? Trace Settings, WinHTTP, PAC/WPAD, policy, the listening…
Troubleshooting
Downloaded a suspicious file but did not open it? Learn how to judge the…
Tips & Tricks
Disable Chrome Incognito mode with the correct Windows, Mac, Google Admin, or Family Link…
Tips & Tricks
Is XVideos safe? Learn what a visit, pop-up, notification, download, or login means and…
Tips & Tricks
Received a Zambia Ministry tender from mmmd-gov.com.zm? The domain, hidden PDF link, outdated law,…
Tips & Tricks
Antigravity 2.3.1 language_server.exe hash verified. Check the source, path, version, SHA-256, and installer signature…