Chinese APT VerdantBamboo Deploys BSD‑Variant Brickstorm on pfSense Firewalls
Volexity reports that the China‑linked threat actor VerdantBamboo (aka WARP PANDA) compromised a Managed Services Provider's pfSense firewall, installing a BSD‑compatible Brickstorm backdoor along with PLENET/GRIMBOLT and AGENTPSD tools to target Linux appliances. The intrusion had persisted for at least 18 months, enabling proxy access to the victim’s network and Microsoft 365 services.