Malware
BRICKSTORM
According to Google, BRICKSTORM is used to consistently target appliances, among them primarily VMware vCenter and ESXi hosts.
BRICKSTORM is a Linux malware family operated by UTA0178.
Background
Google reports that BRICKSTORM is repeatedly deployed against appliances, chiefly VMware vCenter and ESXi hosts.
Source: Malpedia (Fraunhofer FKIE).