brickstorm

CISA and allied partners have pushed an urgent update to the BRICKSTORM malware analysis playbook—adding new indicators and detection signatures for additional samples (including, according to the advisory, Rust-based builds), and shipping two new YARA rules to help defenders find previously...

Chinese state-sponsored actors have been observed deploying a sophisticated backdoor called BRICKSTORM to maintain long-term, stealthy access across public‑sector and information technology environments — with confirmed targeting of VMware vSphere management infrastructure, Windows systems, and...