Belarusian Cyber Partisans reportedly spent nearly two years inside a Russian healthcare network using Vasilek malware

Updated: 2026.10.05 15D ago 1 sources

Threat Actors & APTs Malware Breaches & Data Leaks

Researchers say Belarusian Cyber Partisans stayed inside a Russian healthcare organization’s network from early 2024 until at least December 2025 and accessed sensitive medical data. Russian firm Solar said the victim had extensive links to other healthcare organizations, raising the risk of trusted-relationship attacks through an already trusted partner. The intrusion reportedly used a newer Vasilek Windows backdoor that can run commands, steal files, capture screenshots, and log keystrokes while communicating through Telegram.

Why it matters: This matters because a single breach of a connected healthcare organization could expose patient data and create a pathway into other medical networks. Healthcare defenders, especially in Russia and connected partners, should review for Vasilek indicators, investigate partner trust links, and check for long-term unauthorized access.

Sources

Belarusian hacktivists spent two years inside Russian healthcare network, researchers say

2026.10.05 100% relevant

This article appears to be the first tracked report tying Belarusian Cyber Partisans to a multi-year espionage intrusion at an unnamed Russian healthcare organization and describing the use of Vasilek malware in that specific incident.