Cyber Partisans hid Vasilek in VMware Tools for two years
Vasilek 1.5.8 ran from a fake VMware Tools service and could log keys, capture screens, and move the cursor.
Stories per day · 30 days
2 RSS
5 stories, newest first · one card per story
Stories tagged #telegram-c2
Partisan Zmiy Malware Campaign Uses Telegram and DNS Tunneling to Target Healthcare Networks
Cyber Partisans maintained roughly two-year espionage access to a medical organization using an updated Vasilek Telegram-controlled backdoor, GOST tunnels, and DNS tunneling.
3
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
Group-IB attributes the Iran-linked hacktivist persona Handala (Void Manticore/MOIS) to the Telegram-based HEAVYGRAM backdoor and CRUDEEXCLUDE staging utility.
2
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
FBI, NCSC, and AIVD detail Iran MOIS spyware CHOSEN BRICK/HEAVYGRAM, Telegram-controlled Windows malware spying on dissidents since 2023.
3
Iranian cyber spies used fake MRI scan results to hack ‘enemy of regime’
UK, US, and Dutch agencies expose CHOSEN BRICK spyware used by Iranian MOIS hackers to surveil dissidents, journalists, and activists via fake MRI lures.
2