importantSYS.SOURCE: Solar• 2026-10-21T11:35:15+05:30
Vasilek Backdoor Discovered in VMware Tools via 2-Year Russian Healthcare Breach
A Belarus-aligned group, Partisan Zmiy, embedded the Vasilek backdoor in VMware Tools during a prolonged breach of a Russian healthcare organization. Russian firm Solar reported the activity, linking it to the group's 2020+ track record of industrial attacks.
A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization.
According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Partisan Zmiy, which is also known as the Cyber Partisans.
Known to be active since at least 2020, the group has a track record of striking industrial
*** END OF TRANSMISSION ***