highCyber Attacks
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Belarus-aligned hacktivist group Partisan Zmiy exploited supply chain to maintain persistent access
Cyber.TechVoid1 min read
Key Takeaways
- Partisan Zmiy (Cyber Partisans), a Belarus-aligned hacktivist group, conducted a nearly two-year cyber espionage campaign against a Russian healthcare organization.
- The Vasilek backdoor was hidden in compromised VMware Tools installers, leveraging code-signing trust to maintain persistence.
- The intrusion began around October 2024 and was discovered in October 2026.
Related Security News
highCyber Attacks
Attackers Abuse UpdraftCentral Keys to Plant Backdoors on WordPress Sites
Unknown threat actors breached TeamUpdraft's website and gained unauthorized access to customers' connection keys for UpdraftCentral, UpdraftVault, and UpdraftClone. The stolen keys were subsequently used to plant backdoors on WordPress sites. UpdraftPlus, the flagship backup plugin with over four million active installations, is among the affected products. TeamUpdraft has not yet released an official statement confirming the full scope of the breach or the specific exploitation methods employed.
The Hacker News1 min read
