CISA Alerts on Chinese BrickStorm Malware Targeting VMware Servers

CISA Alerts on Chinese BrickStorm Malware Targeting VMware Servers

First seen 4 Dec 2025, 21:46 UTC •BleepingcomputerCrnThecyberexpress •33.3

Article Content

Browse articles
ThreatCluster

CISA, in collaboration with the NSA and Canada's Cyber Security Centre, has issued a warning about Chinese hackers using BrickStorm malware to backdoor VMware vSphere servers. The attacks primarily affect government and IT sectors, allowing attackers to access the vCenter management console, steal VM snapshots, and create rogue virtual machines.

Ask AI about this cluster

How this analysis works

Extracted Entities

1 / 2