Archive · 5 Dec 2025
Chinese Hackers Use Malware for Potential Sabotage
Chinese hackers have been using a special kind of computer virus called Brickstorm to sneak into important government and technology networks in the U.S. and Canada.
They have been able to stay hidden in these networks for a long time, stealing important information and potentially causing big problems.
The hackers used a product called VMware vSphere to get into these networks.
The U.S. and Canadian cybersecurity agencies are warning about this because it could be very dangerous.
The Chinese government says they are not involved in these attacks and that there is no proof of their involvement.
Companies like Broadcom, which makes VMware, are telling their customers to update their software to protect against these attacks.
Chinese-linked hackers used malware called Brickstorm to infiltrate government and IT entities in the U.S. and Canada.
The hackers maintained access to these networks from April 2024 to at least September 2025.
The malware targets VMware vSphere, a product used to manage virtual machines within networks.
The hackers can steal login credentials and sensitive information, potentially taking full control of targeted computers.
The Chinese government denies involvement, stating there is no evidence to support the claims.
- Who
- Chinese-linked hackers
- What
- Used sophisticated malware to infiltrate and maintain access to government and IT entities
- When
- From April 2024 to at least September 2025
- Where
- United States and Canada
- Why
- For potential long-term access, disruption, and sabotage
- Malware Used
- Brickstorm
- Targets
- Government and IT entities
- Duration of Access
- April 2024 to at least September 2025
- Software Targeted
- VMware vSphere
- Agencies Involved
- CISA, NSA, Canadian Centre for Cyber Security