@securityonline.bsky.socialThe ted backdoor is DPRK Linux malware hidden inside HAProxy. It pairs with curlRAT to spy on South Korean media and automotive firms, Rapid7 reports.
#TedBackdoor #curlRAT #DPRK #APT37 #LinuxMalware #HAProxy #SouthKorea #Cyberespionage #Rapid7 #InfoSec
@securityonline.bsky.socialDiscover how suspected North Korean hackers use the Ted Backdoor HAProxy malware and CurlRAT to infiltrate South Korean organizations and steal sensitive data.
@nuke86.rfeed.itcrond, sshd, polkitd: la backdoor nordcoreana Ted infetta i demoni Linux nascosta dentro HAProxy
il blog: insicurezzadigitale.com/crond-sshd-p...
#cybersecurity #apt #apt37 #backdoor #coreadelnord #coreadelsud #infosec #lazarusgroup #linux #linuxbackdoor
@hendryadrian.bsky.socialNorth Korean hackers deployed a new Linux espionage toolkit against South Korean automotive and media firms, using a HAProxy backdoor, trojanized tools, and a curl-based RAT for stealthy long-term surveillance. #NorthKorea #APT37 #Lazarus
@hendryadrian.bsky.socialRapid7 uncovered a Linux toolkit with ted backdoor, CurlRAT, and an SSH keylogger, targeting South Korean media and automotive firms for stealthy espionage. #SouthKorea #APT37 #Kimsuky