Nimbus Manticore uses trojanized coding challenges to deploy NodeRabbit and PollCat RATs across Windows, Linux, and macOS.
Ted hides inside trojanized HAProxy builds to intercept traffic and serve altered pages at two South Korean organizations.