Belarusian hacktivists spent two years inside Russian healthcare network, researchers say
Belarusian Cyber Partisans maintained nearly two years of access to a Russian healthcare network, reading sensitive medical data, researchers say.
Russian security firm Solar discovered in December 2025 an intrusion it traces to early 2024 at an unidentified Russian healthcare organization, attributing it to the Belarusian Cyber Partisans. The attackers accessed sensitive medical data without destructive activity, which Solar believes was intended to preserve access for espionage and trusted-relationship attacks against connected healthcare organizations. Tools included a newer version of the Vasilek Windows backdoor, which communicates over Telegram and supports command execution, file transfers, screenshots, and keylogging. Russia's Supreme Court designated the Cyber Partisans an extremist organization in July.