Security

BRICKSTORM

BRICKSTORM is a Go backdoor that China-nexus actors deploy on VMware vCenter servers. It masquerades as vCenter processes and talks to its operators over WebSockets inside TLS.

Deep dive

Learn Article

Why Hypervisor Log Retention Must Live Off the Host

Hypervisor log retention fails if logs stay on the host an attacker controls. How to plan off-host storage, retention length and a safe collector.

intermediate 4 min read

Back to glossary