
- Chinese state-sponsored actors deploy Brickworm malware to infiltrate government and IT networks worldwide
- Malware targets VMware vSphere and Windows, enabling persistence, file manipulation, and Active Directory compromise
- CISA warns of long-term espionage and sabotage risks; China denies accusations, calling the US a “cyber-bully"
Chinese state-sponsored threat actors have been using Brickworm malware against government organizations around the world - maintaining access, exfiltrating files, and eavesdropping.