New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic

Home / Tech / New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic

New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic

September 4, 2026 dirk 0 Comments 3 tags

New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic

A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean organizations, where it intercepted web traffic and served altered pages to selected visitors.

The attackers named the implant ted in debug strings left in the binary. It is not a HAProxy vulnerability, and installing it requires code execution on the host and

Source: The Hacker News

Explore More

Show HN: Hackney – Compare Uber, Lyft, Waymo, and Robotaxi Prices

Show HN: Hackney – Compare Uber, Lyft, Waymo, and Robotaxi Prices Source: Hacker News

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain

The Customer Who Almost Killed Slack, Stripe, and Airbnb

The Customer Who Almost Killed Slack, Stripe, and Airbnb Source: Hacker News