North Korean Hackers Deploy New Linux Espionage Toolkit Against South Korean Targets

North Korean threat actors have deployed a novel Linux-based espionage toolkit that embeds a backdoor within HAProxy, targeting automotive and media organizations in South Korea for long-term surveillance. The attack represents a new capability in their cyber arsenal, indicating a shift toward stealthier, persistent intrusion methods. The full scope and attribution remain partially unconfirmed, but the targeting pattern aligns with prior North Korean espionage campaigns.