Ted hides inside trojanized HAProxy builds to intercept traffic and serve altered pages at two South Korean organizations.
Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.