News Summary

• A Belarus-aligned hacktivist group spent nearly two years within the network of a Russian healthcare organization.
• According to a report published by Russian cybersecurity firm Solar, the activity has been attributed to a threat cluster dubbed Partisan Zmiy.
• The group has a track record of striking industrial enterprises and government agencies in Russia and Belarus with a backdoor called Vasilek.
• Unlike other attacks linked to Cyber Partisans, the threat actors remained on the network for an extended period of time without carrying out any destructive activity.