Belarus-Aligned Hackers Hid a Backdoor in VMware Tools for 2 Years
Solar 4RAYS says Partisan Zmiy spent about two years in a Russian healthcare network, hiding the Telegram-controlled Vasilek backdoor and a fake service in an unmonitored VMware Tools directory.