DPRK-Linked Hackers Deploy Ted Backdoor and CurlRAT Against South Korean Firms

North Korean Hackers Deploy New Linux Espionage Toolkit | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

North Korea-aligned threat actors have been using a new Linux toolkit in attacks targeting automotive and media organizations in South Korea, Rapid7 reports. Designed for long-term surveillance, the framework consists of a HAProxy instance called ‘ted backdoor’ and trojanized versions of tools such as ‘agetty’, ‘atd’, ‘crond’, ‘polkitd’, and ‘sshd’. The toolkit supports remote command […] Thank you for subscribing to our RSS feed!

DPRK-Linked Hackers Deploy Ted Backdoor and CurlRAT Against South Korean Firms

South Korean automotive and media organizations have been hit by a quiet Linux intrusion toolkit built for long-term access. The malware hides inside software that manages web traffic, allowing attackers to watch users, steal information, and change pages delivered through compromised servers. The operation appears designed for patience rather than disruption. Attackers likely entered through […]

Malicious Ted Backdoor Conceals Itself Inside HAProxy Builds for Traffic Monitoring

Two South Korean organizations have been identified as being infected with a previously undocumented Linux backdoor embedded directly within custom… Read more →