BRICKSTORM Backdoor - Malware Analysis Report | CISA

BRICKSTORM is a sophisticated backdoor malware used by PRC state-sponsored actors to maintain stealthy, long-term access to VMware vSphere and Windows environments, enabling credential theft, lateral movement, and full system control while evading detection through advanced persistence and encrypted command-and-control channels.