Windows Subsystem for Linux (WSL): Threats Still Lurk Below the (Sub)Surface - Lumen

Executive Summary Last fall, Black Lotus Labs discovered in the wild what had until then only been theorized: Linux binaries were being used as loaders in Windows Subsystem for Linux (WSL). Since our initial report, Black Lotus Labs continues to monitor the WSL attack surface for new developments. In the last few months, we have

Black Lotus Labs - Lumen

Malware - Lumen

New Windows Subsystem for Linux malware steals browser auth cookies

Did you really believe that it was safe to use WSL (Windows

New malware uses Windows Subsystem for Linux for stealthy attacks

ZuoRAT Hijacks SOHO Routers to Silently Stalk Networks - Lumen

Emotet Redux - Lumen

Developing in the Windows Subsystem for Linux with Visual Studio Code

Stephen Deao posted on LinkedIn

Under the hood of Microsoft's Windows Subsystem for Linux

WSL2 Forensics: Detection, Analysis & Revirtualization

Windows Subsystem for Linux (WSL): Threats Still Lurk Below the

Implications of Windows Subsystem for Linux for Adversaries

Connected Security - Lumen

No rest for the wicked: HiatusRAT takes little time off in a