Chinese Hackers Use Brickstorm Malware to Compromise VMware vSphere Servers
US cyber agency CISA warns of a new threat. Chinese hackers are using the Brickstorm malware to backdoor VMware vSphere servers, creating hidden virtual machines and stealing sensitive data. The attackers use multiple layers of encryption and a self-monitoring function to maintain persistence. CISA investigated an incident in April 2024 and found that the hackers … Read more