VerdantBamboo — Threat Actor Profile, Campaigns & Targets

Related Threat Clusters

Chinese APT VerdantBamboo Exploits Brickstorm Malware for Long-term Network Access
The Chinese espionage group UNC5221, also known as VerdantBamboo, has been using the Brickstorm backdoor and new malware variants Plenet and AgentPSD to maintain access to compromised Microsoft 365 environments.…

5 articles · Updated June 5, 2026
VerdantBamboo's 18-Month Cyber Campaign Targets Managed Service Providers
A Chinese threat actor known as VerdantBamboo compromised a company's network through a managed service provider (MSP) over 18 months. The initial breach involved a Linux-based Egnyte Storage Sync appliance, which was…

2 articles · Updated June 5, 2026

Verdantbamboo Just Another Brickstorm In The Firewall — www.volexity.com · June 5, 2026
Chinese APT deploys new malware to keep access to hacked networks — Bleepingcomputer · June 5, 2026
Chinese APT deploys new malware to keep access to hacked networks — Bleepingcomputer · June 5, 2026
Chinese APT VerdantBamboo Uses BRICKSTORM Malware to Compromise Firewalls and Appliances — Cybersecuritynews · June 5, 2026
China’s VerdantBamboo Experimented With Three Re — Thecyberexpress · June 5, 2026
Chinese APT VerdantBamboo Targets Appliances with BRICKSTORM Malware — Gbhackers · June 5, 2026

Unc5221 Warp Panda Malware Supply Chain Attack Zero-day Exploit Unc5221 Campaign Dell Egnyte Synology China United States CWE-269 - Improper Privilege Management