BRICKSTORM backdoor exposed: CISA warns of advanced China

Securityaffairs.Co •Pierluigi Paganini • December 5, 2025

CISA details BRICKSTORM, a China-linked backdoor used by China-linked APTs to secure long-term persistence on compromised systems. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has disclosed technical details on BRICKSTORM, a backdoor used by China state- threat actors to gain and maintain long-term persistence on compromised systems, highlighting ongoing PRC cyber-espionage activity. “The Cybersecurity […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Exposes BRICKSTORM Backdoor Linked to China APTs CISA has disclosed details about the BRICKSTORM backdoor, which is linked to Chinese state-sponsored threat actors. This backdoor targets VMware vSphere environments within government and technology sectors, enabling long-term persistence on compromised systems. Ongoing cyber-espionage activities by these actors have been highlighted in the report. 2 sources 33

Extracted Entities

BRICKSTORM backdoor exposed: CISA warns of advanced China

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Malware (1)