Tag: unc5221

2 Attack Reports | 0 Vulnerabilities

Attack reports

Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors | Google Cloud Blog

Google Threat Intelligence Group (GTIG) is tracking BRICKSTORM malware activity, which is being used to maintain persistent access to victim organizations in the United States. Since March 2025, Mandiant Consulting has responded to intrusions across a range of industry verticals, most notably legal…
linux
windows
zero-day
brickstorm
ssh
2025-10-08
unc5221
vpxd
backup scan
sentinel
silk typhoon
systemconfiguration
socks proxy
vcenter
Published: October 8, 2025
Downloadable IOCs: 12

Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors

Google Threat Intelligence Group (GTIG) is tracking BRICKSTORM malware activity, which is being used to maintain persistent access to victim organizations in the United States. Since March 2025, Mandiant Consulting has responded to intrusions across a range of industry verticals, most notably legal…
linux
windows
zero-day
brickstorm
ssh
2025-10-08
unc5221
vpxd
backup scan
sentinel
silk typhoon
systemconfiguration
socks proxy
vcenter
Published: October 8, 2025
Downloadable IOCs: 12
Click here to see more Attack Reports