HAProxy

Reported Context (2)

across South Korea’s automotive and media industries with minimal detection. The campaign made use of a HAProxy instance named “ted backdoor”, alongside trojanized versions of crond, agetty, atd, sshd, and polkitd. DPRK-Linked Toolkit Uses HAProxy Backdoor and CurlRAT to Target South Korean Organizations
And Willy Tarreau, lead developer of HAProxy, adds the numbers: Mythos Marks an Acceleration in AI-Driven Vulnerability Discovery, Not a Beginning

CVE (1)

Malware (2)

People (8)

Threat Actors (3)

MITRE ATT&CK (26)

Vendors (3)

Products (17)

Tools (1)

Industries (2)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.