Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion

A Belarus-aligned hacktivist group, known as Partisan Zmiy or Cyber Partisans, spent nearly two years inside a Russian healthcare organization's network, hiding a Vasilek backdoor in VMware Tools. Russian cybersecurity firm Solar reported the activity, noting the group has been active since at least 2020 with a history of targeting industrial entities.