BRICKSTORM
Unknown Dormant
- Mentions
- 1
- First seen
- 02 Apr 2026
- Last seen
- 02 Apr 2026
Relevant to you · Affects your stack
- Technology:
- VMware vSphere 8 / ESXiMicrosoft Defender for Endpoint
Origin
Unattributed
Profile
BRICKSTORM is a threat actor group associated with a malware of the same name. The recent report 'vSphere and BRICKSTORM Malware: A Defender's Guide' focuses on their activities targeting VMware vSphere environments. No further specific information about targeted sectors or regions is available. The malware appears to aim at virtualized infrastructures.
Affected vendors
VMware
Associated malware / tools
BRICKSTORM
Linked CVEs
- CVE-2026-22769 KEV CVSS 10.0 EPSS 22%
Related actors
Share a CVE, technique or malware with this actor.