A Belarus-aligned threat group maintained covert access inside a Russian healthcare network for nearly two years. Investigators revealed that the attackers concealed a custom backdoor named Vasilek within legitimate VMware Tools components to ensure persistence and facilitate long-term espionage.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →