What does a compromised load balancer look like? Usually, just like a healthy one. Rapid7 Labs found a backdoor in a modified HAProxy build on hosts the attackers had already compromised. There was no CVE and no tampered download. Verify every build you run: www.haproxy.com/blog/how-to-...
haproxy.comHow to prove your HAProxy build is legitimateAttackers trojanized HAProxy binaries on hosts they had already compromised. No CVE, no supply chain breach. Here are five habits for verifying the builds you run.
0 reposts0 likes