Related Threat Clusters

Chinese APT VerdantBamboo Exploits Brickstorm Malware for Long-term Network Access
The Chinese espionage group UNC5221, also known as VerdantBamboo, has been using the Brickstorm backdoor and new malware variants Plenet and AgentPSD to maintain access to compromised Microsoft 365 environments.…

5 articles · Updated June 5, 2026
VerdantBamboo's 18-Month Cyber Campaign Targets Managed Service Providers
A Chinese threat actor known as VerdantBamboo compromised a company's network through a managed service provider (MSP) over 18 months. The initial breach involved a Linux-based Egnyte Storage Sync appliance, which was…

2 articles · Updated June 5, 2026
The Gentlemen Ransomware Group Exploits Fortinet Flaws and AI Tools
The Gentlemen ransomware group has emerged as a significant threat in 2026, exploiting vulnerabilities in Fortinet systems, particularly CVE-2024-55591, an authentication bypass flaw. They have been observed using…

4 articles · Updated June 3, 2026

Recent Intelligence Reports

Verdantbamboo Just Another Brickstorm In The Firewall — www.volexity.com · June 5, 2026
Chinese APT deploys new malware to keep access to hacked networks — Bleepingcomputer · June 5, 2026
Chinese APT deploys new malware to keep access to hacked networks — Bleepingcomputer · June 5, 2026
China’s VerdantBamboo Experimented With Three Re — Thecyberexpress · June 5, 2026
Gentlemen Ransomware Exploits Fortinet Flaws, AI, and Custom C2 Tools — Gbhackers · June 3, 2026

Unc5221 VerdantBamboo Warp Panda Malware Phishing Ransomware Supply Chain Attack Zero-day Exploit Unc5221 Campaign Dell Egnyte Synology