vSphere and BRICKSTORM Malware: A Defender's Guide
ResearchVMware vCenter Server Appliance (VCSA)BRICKSTORMVMware ESXi Read at Mandiant
Below is the opening; the full story is at Mandiant.
From Mandiant
Written by: Stuart Carrera
Introduction
Building on recent BRICKSTORM research from Google Threat Intelligence Group (GTIG), this post explores the evolving threats facing virtualized environments. These operations directly target the VMware vSphere ecosystem, specifically the vCenter Server Appliance (VCSA) and ESXi hypervisors. To help organizations stay ahead of these risks, we will focus on the essential hardening strategies and mitigating controls necessary to secure these critical assets.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.