China-nexus hacking group observed maintaining long-term access and deploying BRICKSTORM malware on compromised servers.