VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

VerdantBamboo, a China-nexus espionage group, is deploying BRICKSTORM backdoor variants alongside PLENET and AGENTPSD malware against Linux appliances, particularly targeting MSPs. The group exploits privilege escalation flaws to compromise cloud environments and establish persistence. Linux-based infrastructure and MSP customers are at immediate risk of compromise and lateral movement into cloud tenants.