brickstorm

BRICKSTORM Hides Where Your EDR Can't See It

John Z Black Apr 6, 2026

Threat Intelligence #china #espionage #vmware #vsphere #brickstorm #unc5221 #edr #hypervisor

A suspected China-nexus espionage operation targets VMware vCenter and ESXi hypervisors, persisting at the virtualization layer where endpoint security is blind.