Hackers Escalating Misuse of Microsoft Graph API for Malicious Activities
By Nathan Zych, Chief Executive Officer · · Updated July 10, 2025 · 1 min read

Threat actors are escalating their misuse of the Microsoft Graph API for malicious activities, enabling them to communicate with command-and-control (C&C) infrastructure on Microsoft cloud services and evade detection, according to a report by the Symantec Threat Hunter Team, part of Broadcom.
About the author
Nathan Zych, Chief Executive Officer
Written and reviewed by the Outsource IT team, a Burlington, Ontario managed IT services provider supporting businesses across the GTA for over 20 years. Meet the team.
Want this handled for you?
Outsource IT keeps Ontario businesses secure, supported and running. Book a short call, or score your current setup with our free IT Health Check.


