Windows Subsystem for Linux (WSL): Threats Still Lurk Below the (Sub)Surface - Lumen

Executive Summary Last fall, Black Lotus Labs discovered in the wild what had until then only been theorized: Linux binaries were being used as loaders in Windows Subsystem for Linux (WSL). Since our initial report, Black Lotus Labs continues to monitor the WSL attack surface for new developments. In the last few months, we have

Windows Subsystem for Linux (WSL): Threats Still Lurk Below the

Black Lotus Labs - Lumen

Implications of Windows Subsystem for Linux for Adversaries

New HiatusRAT router malware covertly spies on victims - Lumen

Implications of Windows Subsystem for Linux for Adversaries

Chaos is a Go-based Swiss army knife of malware - Lumen

Qakbot: retool, reinfect, recycle - Lumen

Qakbot: retool, reinfect, recycle - Lumen

Emotet Redux - Lumen

Chaos is a Go-based Swiss army knife of malware - Lumen

Implications of Windows Subsystem for Linux for Adversaries

Microsoft Windows Subsystem for Linux (WSL) Exploited as a Safe