vSphere and BRICKSTORM Malware: A Defender's Guide | Google Cloud Blog

Threat actors are increasingly targeting the VMware vSphere control plane with persistent malware like BRICKSTORM, exploiting weak identity and network controls to evade traditional security tools, making infrastructure-centric hardening, OS-level logging, and proactive behavioral detection essential for defending virtualized environments.