highCyber Attacks
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group attributed to Partisan Zmiy (also known as Cyber Partisans) conducted a cyber espionage campaign against a Russian healthcare organization. According to a report by Russian cybersecurity firm Solar, the group hid the Vasilek backdoor in compromised VMware Tools installers, enabling nearly two years of unauthorized access beginning around October 2024 and discovered in October 2026. The attackers leveraged signed, seemingly legitimate software updates to maintain persistence and exfiltrate data.
The Hacker News1 min read