VerdantBamboo: Just Another BRICKSTORM in the Firewall

VerdantBamboo, a sophisticated Chinese threat actor, stealthily maintained long-term access to organizations by deploying custom malware like BRICKSTORM, PLENET, and AGENTPSD on edge devices and appliances lacking EDR coverage, exploiting supply chain relationships and privilege escalation vulnerabilities to evade detection and persist for over 18 months.