Mandiant (part of Google Cloud)
banner
mandiant.com
Mandiant (part of Google Cloud)
@mandiant.com
We’re determined to make organizations secure against cyber threats and confident in their readiness.
BRICKSTORM malware is being used by suspected China-nexus actor, UNC5221, in a stealthy espionage campaign.

-Avg dwell time: 393 days
-Targets: US legal, SaaS, BPOs & tech firms

We have released a scanner, IOCs, and guidance to help defenders.

Full analysis here: bit.ly/4pT3pku
September 24, 2025 at 7:12 PM
M-Trends 2025 is here!

Get data from our investigations, including top initial infection vectors and targeted industries, and dive deep into trends such as rising infostealer use and the DPRK insider threat. We also share recommendations to stay ahead.

Read now: cloud.google.com/security/res...
April 23, 2025 at 7:40 PM