NVISOPDF
NVISO-BRICKSTORM-Report.pdf
Excerpt
This report delivers a comprehensive technical analy-
sis of BRICKSTORM, an espionage backdoor linked to the
China-nexus cluster UNC5221.
NVISO investigates newly identified Windows-based
BRICKSTORM variants, expanding on its previous presence
in Linux environments. These backdoor samples,
linked to long-term espionage campaigns, target
European industries in key sectors of Chinese interest.
The analysis details adversary techniques, infrastructure,
and defensive challenges, concluding with actionable mitiga-tion and threat-hunting recommendations.
BRICKSTORM
Backdoor Analysis
A Persistent Espionage Threat
to European Industries
NVISO Incident Response
ATHENS BRUSSELS FRANKFURT MUNICH VIENNA
www.nviso.eu
W W W . N V I S O . E U
April 2025
http…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by NVISO on blog.nviso.eu.
Mentioned in the excerpt
More from NVISO1
- VShellNVISO · Added 6 Nov 2025
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Animal Farm APT and the Shadow of French IntelligenceInfosec Institute · Published 8 Jul 2015
- Darktrace Malware Analysis: Unpacking SnappyBeeDarktrace · Published 3 Feb