Windows Subsystem for Linux (WSL): Threats Still Lurk Below the (Sub)Surface - Lumen

Executive Summary Last fall, Black Lotus Labs discovered in the wild what had until then only been theorized: Linux binaries were being used as loaders in Windows Subsystem for Linux (WSL). Since our initial report, Black Lotus Labs continues to monitor the WSL attack surface for new developments. In the last few months, we have

Chaos is a Go-based Swiss army knife of malware - Lumen

Now there's malware for Windows Subsystem for Linux • The Register

ZuoRAT Hijacks SOHO Routers to Silently Stalk Networks - Lumen

Chaos is a Go-based Swiss army knife of malware - Lumen

Windows Subsystem for Linux version 2.0.0 is now available

Connected Security - Lumen

Windows Subsystem for Linux gets new 'mirrored' network mode

Qakbot: retool, reinfect, recycle - Lumen

Qakbot: retool, reinfect, recycle - Lumen

Malware targets the Windows Subsystem for Linux (WSL) – Born's

Windows Subsystem for Linux (WSL): Threats Still Lurk Below the

WSL2 Forensics: Detection, Analysis & Revirtualization

New developments in the WSL attack. [Research Saturday]