SecurityThe Hacker Newsabout 3 hours ago
Hackers Hide Vasilek Backdoor in VMware Tools
4 min read
A Belarus-aligned group named Partisan Zmiy hid a Vasilek backdoor inside VMware Tools during a two-year intrusion into a Russian healthcare network. The group discovered the intrusion in December 2025, though evidence suggests compromise dates back to early 2024. The malware uses Telegram for command-and-control and can move cursors to simulate user input.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyVMware
