BrickStorm is a highly stealthy Linux backdoor designed for long-term, targeted cyber-espionage. Brickstorm is closely associated with Cyber Espionage group UNC5221, which is known for exploiting zero-days vulnerability in network edge appliances like Ivanti, F5 and MiTRE breach. Unlike commodity malware, BrickStorm is deployed post-compromise, operates largely in memory, and uses a modular architecture with custom encrypted command-and-control (C2). Its focus on Linux servers, network appliances, and embedded systems reflects a broader trend: attackers increasingly target infrastructure layers where visibility and detection are weakest.
Secure your enterprise with AI-powered Versa SASE that boosts threat detection and response with real-time analytics, behavioral insights, and intelligent security automation for today’s digital landscape.
Versa Advanced Threat Protection (ATP) is a comprehensive cybersecurity solution designed to protect organizations from sophisticated threats across various vectors. Versa’s ATP detection reports are mapped directly to the MITRE ATT&CK framework, providing security teams a fingerprint of attacks, which can then be used for attribution to known adversaries, incident response, simulation attacks, and other security measures.
Subscribe to the Versa Blog
Trial
ROI
Contact