New BRICKSTORM Malware Targeting Critical Infrastructure

In today’s security landscape, threats don’t always come through the front door — many come through networks, servers, and digital systems that organizations rely on every day. Recently, the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Canadian Centre for Cyber Security released a joint advisory about a new and highly advanced cyber threat called BRICKSTORM malware.This threat is designed for long-term access, stealth, and disruption.

What is BRICKSTORM Malware?

BRICKSTORM is a sophisticated backdoor malware used by state-sponsored actors linked to the People’s Republic of China (PRC). It specifically targets:

• VMware vSphere/vCenter servers
• Windows environments
• Critical infrastructure networks

Once inside a system, BRICKSTORM can:

     ✔  Hide its communication
     ✔  Move laterally through networks
     ✔  Maintain long-term access
     ✔  Reinstall itself even if removed

This makes it especially dangerous — it’s designed not just to attack, but to stay undetected and build persistent control within a victim’s environment.

Who Is Being Targeted?

According to CISA’s analysis, BRICKSTORM is primarily aimed at:

• Government agencies
• IT sector organizations
• Critical infrastructure operators

⚠ Why This Threat Matters

In today’s interconnected world, cyber and physical security are no longer separate. Attacks on digital systems can affect communication, operations, surveillance, and even emergency response.

A strong security posture means being prepared on all fronts:

🔐  Digital security – firewalls, monitoring, secure systems
📹  Physical security – surveillance, access control, communication tools
🛡   Operational security – trained teams, clear processes, reliable tools

The BRICKSTORM advisory is a powerful reminder that security is not just about cameras and guards — it’s about the entire system working together to protect people, properties, and data.

At Ransom Shield,

our mission is to help organizations stay protected — both physically and technologically. While BRICKSTORM is a cybersecurity threat, it reinforces something we strongly believe in:

👉 Security requires awareness, readiness, and the right tools working together.

Whether it’s real-time monitoring, smart surveillance, or secure communication between guards, clients, and administration, every layer strengthens your overall protection.Staying informed is the first step.

Taking action is the next.