October 6, 2026
- Belarusian Cyber Partisans allegedly remained inside a Russian healthcare network for nearly two years. Rostelecom subsidiary Solar traced the earliest activity to early 2024 and discovered the intrusion in December 2025. It says the group accessed medical data but avoided disruption, likely preserving the foothold for espionage or trusted-relationship pivots. The Vasilek Windows backdoor used Telegram for C2 and supported commands, file transfers, screenshots and keylogging. The Record · Threat Activity & Espionage
in A Trusted Company Connection Exposes 8.8 Million Danish CPR Records