As cited
Copy frozen at (site build).
threat intel
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
A Belarus-aligned hacktivist group called Partisan Zmiy, also known as the Cyber Partisans, conducted a nearly two-year intrusion into a Russian healthcare organization. The group hid a backdoor called Vasilek within VMware Tools to maintain persistent access. Active since at least 2020, the group has targeted industrial infrastructure.
Why it matters: Healthcare organizations worldwide should audit VMware Tools deployments and network access logs for signs of Vasilek backdoors, as this persistence mechanism poses ongoing risk to medical systems and patient data.
- Source published
- First seen by Cybersecurity Tracker