Dossier
GRIMBOLT
Coverage of GRIMBOLT in the Nexus archive.
- VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances
VerdantBamboo, a China-nexus cyber espionage group, has deployed a BSD variant of the BRICKSTORM backdoor along with PLENET (GRIMBOLT) and AGENTPSD malware to target Linux systems. Volexity attributed this activity to VerdantBamboo, noting overlaps with the Clay Typhoon (Microsoft) hacking group.