DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
Rapid7 uncovered a DPRK-linked Linux toolkit using a HAProxy-embedded ted backdoor, SSH keylogger, and curlRAT against South Korean media and automotive firms.
68
Malware
SSH keylogger
- Mentions · 7d0
- Mentions · 30d0
- All mentions1
- First seenSep 4, 2026
- Last mentionedSep 4, 2026
Timeline
1 articles · newest firstAppears with
- South Korean media organizationsvictim · 1
- curlRATproduct · 1
- ted backdoormalware · 1
- Kimsukythreat actor · 1
- curlRATmalware · 1
- HAProxyproduct · 1
- South Korean automotive organizationsvictim · 1
- APT37threat actor · 1
- Rapid7vendor · 1
- ted backdoorproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.