Threat Actor
VerdantBamboo
- First Reported
- Jun 4, 2026
- Latest Reported
- Sep 3, 2026
Reported Context (2)
- Deployed BRICKSTORM after obtaining default-account SSH credentials from a managed service provider and exploiting a sudo misconfiguration. Recorded Future Reports 215 Actively Exploited CVEs and Expanding Supply-Chain Threats in H1 2026
- Volexity's name for the Chinese threat actor responsible for the appliance and MSP compromises; the article associates this actor with WARP PANDA and UNC5221. Volexity Details VerdantBamboo Breach Using BRICKSTORM on Edge Appliances
CVE (5)
Malware (53)
Threat Actors (15)
MITRE ATT&CK (26)
Vendors (26)
Products (63)
Tools (20)
Industries (11)
Countries (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.