Malicious Ted Backdoor Conceals Itself Inside HAProxy Builds for Traffic Monitoring

Two South Korean organizations have been identified as being infected with a previously undocumented Linux backdoor embedded directly within custom versions of HAProxy load balancers. Based on debug strings found in the binary, Ted was able to intercept web traffic and deliver modified content to selected users.  The activity was attributed with...