# Belarusian Hacktivists Infiltrate Russian Healthcare Network for Two Years

*Published October 7, 2026*
*Source: [https://therecord.media/belarusian-hacktivists-two-years-Russian-healthcare-network](https://therecord.media/belarusian-hacktivists-two-years-Russian-healthcare-network)*

## Executive Summary

The Belarusian Cyber Partisans infiltrated a Russian healthcare network for two years, accessing sensitive data without causing system disruptions. Researchers suggest the group maintained access for espionage and potential trusted-relationship attacks, using tools like the Vasilek backdoor.

## Article

Researchers have uncovered that a Belarusian hacking group, known as the Belarusian Cyber Partisans, spent nearly two years infiltrating a Russian healthcare network. This breach, identified by Russian cybersecurity firm Solar in December 2025, was traced back to early 2024. The group is notorious for its disruptive cyberattacks on government agencies and businesses in both Belarus and Russia. Although the specific healthcare organization targeted remains unnamed, it is known to be part of a larger network with connections to numerous healthcare entities. This could have allowed the hackers to expand their reach.

Throughout their two-year presence, the hackers accessed sensitive medical data but refrained from disrupting or destroying any systems. Researchers suggest that this restraint was strategic, allowing them to maintain access for further espionage and to exploit trusted relationships for additional attacks. Trusted-relationship attacks involve compromising an organization that another potential target already trusts and then leveraging that connection to infiltrate the ultimate target.

During the intrusion, the hackers utilized Vasilek, a Windows backdoor that communicates through Telegram, a method that faced reliability issues due to restrictions on the app in Russia. However, hackers can switch to alternative communication methods if needed. Vasilek, first documented by Kaspersky in 2025, is capable of executing various malicious activities, including collecting data, executing commands, and recording keystrokes.

The Belarusian Cyber Partisans emerged after the disputed 2020 Belarusian presidential election, which sparked mass protests against President Alexander Lukashenko. Since then, the group has been responsible for significant cyberattacks against the Belarusian government and has increasingly targeted Russian organizations since the Ukraine war began. In July, Russia's Supreme Court labeled the group an extremist organization, accusing it of attempts to destabilize both Russian and Belarusian governments. Despite this designation, the Cyber Partisans remain resolute in their activities.