Server Message Block - MITRE ATT&CK

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
December 4, 2025
Last Seen
December 4, 2025

Server Message Block is a mitre_attack tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed December 4, 2025; most recent activity December 4, 2025.

Related Threat Clusters

  • CISA Alerts on Chinese BrickStorm Malware Targeting VMware Servers

    CISA, in collaboration with the NSA and Canada's Cyber Security Centre, has issued a warning about Chinese hackers using BrickStorm malware to backdoor VMware vSphere servers. The attacks primarily affect government and…

    3 articles · Updated December 4, 2025

Recent Intelligence Reports

  • CISA Warns PRC Hackers Are Targeting VMware vSphere with BRICKSTORM Malware — Thecyberexpress · December 4, 2025

Related Entities

Malware Privilege Escalation China Government Brickstorm Command and Control Remote Desktop Protocol Web Shell Active Directory DNS-over-HTTPS VMware vCenter VMware vSphere

CVSS v3.1 Breakdown