VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

Volexity attributed a China-nexus group, VerdantBamboo, to deploying a BSD variant of the BRICKSTORM backdoor plus PLENET and AGENTPSD malware on Linux systems. The group compromised an Egnyte Storage Sync system via a privilege escalation flaw, later returning through stolen credentials to breach a Synology NAS and an MSP.