VerdantBamboo — Threat Actor Profile, Campaigns & Targets

Related Threat Clusters

• Chinese APT VerdantBamboo Exploits Brickstorm Malware for Long-term Network Access

  The Chinese espionage group UNC5221, also known as VerdantBamboo, has been using the Brickstorm backdoor and new malware variants Plenet and AgentPSD to maintain access to compromised Microsoft 365 environments.…

  5 articles · Updated June 5, 2026
• VerdantBamboo's 18-Month Cyber Campaign Targets Managed Service Providers

  A Chinese threat actor known as VerdantBamboo compromised a company's network through a managed service provider (MSP) over 18 months. The initial breach involved a Linux-based Egnyte Storage Sync appliance, which was…

  2 articles · Updated June 5, 2026

Recent Intelligence Reports

• Verdantbamboo Just Another Brickstorm In The Firewall — www.volexity.com · June 5, 2026
• Chinese APT deploys new malware to keep access to hacked networks — Bleepingcomputer · June 5, 2026
• Chinese APT deploys new malware to keep access to hacked networks — Bleepingcomputer · June 5, 2026
• Chinese APT VerdantBamboo Uses BRICKSTORM Malware to Compromise Firewalls and Appliances — Cybersecuritynews · June 5, 2026
• China’s VerdantBamboo Experimented With Three Re — Thecyberexpress · June 5, 2026
• Chinese APT VerdantBamboo Targets Appliances with BRICKSTORM Malware — Gbhackers · June 5, 2026

Related Entities