Skip to content
Auto-CTI
Back to all actors

BRICKSTORM

Unknown Dormant
Mentions
1
First seen
02 Apr 2026
Last seen
02 Apr 2026

Relevant to you · Affects your stack

Technology:
VMware vSphere 8 / ESXiMicrosoft Defender for Endpoint

Origin

Unattributed

Profile

BRICKSTORM is a threat actor group associated with a malware of the same name. The recent report 'vSphere and BRICKSTORM Malware: A Defender's Guide' focuses on their activities targeting VMware vSphere environments. No further specific information about targeted sectors or regions is available. The malware appears to aim at virtualized infrastructures.

Affected vendors

VMware

Associated malware / tools

BRICKSTORM

Linked CVEs

Related actors

Share a CVE, technique or malware with this actor.

Activity (8 weeks)

22
23
24
25
26
27
28
29

Recent activity

ESC