Malware
ted backdoor
- First Reported
- Sep 4, 2026
- Latest Reported
- Sep 4, 2026
Reported Context (1)
- and media industries with minimal detection. The campaign made use of a HAProxy instance named “ted backdoor”, alongside trojanized versions of crond, agetty, atd, sshd, and polkitd. This previously undocumented DPRK-Linked Toolkit Uses HAProxy Backdoor and CurlRAT to Target South Korean Organizations
Malware (1)
Threat Actors (3)
MITRE ATT&CK (26)
Products (2)
Industries (2)
Countries (2)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.