SecurityThe Hacker Newsabout 4 hours ago
Ted Backdoor Hides in HAProxy Builds
1 min read
A Linux toolkit named ted was compiled into trojanized HAProxy load balancers at two South Korean organizations, intercepting web traffic and serving altered pages. Rapid7 Labs attributed it with medium confidence to North Korean state-sponsored actors. The implant requires prior code execution and is not a HAProxy vulnerability.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
