The Ted Backdoor Was Built Into HAProxy. Verify the Binary.
Rapid7 found a DPRK toolkit compiled into HAProxy 2.8.12, not exploited through it. Here is how to checksum your reverse proxy, catch /tmp pipes, and stop building load balancers on the edge box.