BreachFeed
← All incidents
suspectedmediumData breachFirst reported Oct 21, 2026

Russian healthcare organization: two-year intrusion with Vasilek backdoor hidden in VMware Tools

Russian cybersecurity firm Solar reported that a Belarus-aligned hacktivist group tracked as Partisan Zmiy (Cyber Partisans) spent nearly two years inside the network of a Russian healthcare organization. The attackers hid a backdoor dubbed Vasilek in VMware Tools. The group has been active since at least 2020.

Members only

The full record: the timeline and 1 linked report

  • Every update as it happened, with the status at each step
  • Every report behind the record, newest first
  • Alerts the moment Unnamed Russian healthcare organization — or anything else you track — is hit again

A free account is all it takes — no card, one minute.

Russian healthcare organization: two-year intrusion with Vasilek backdoor hidden in VMware Tools · BreachFeed