Windows Subsystem for Linux (WSL): Threats Still Lurk Below the (Sub)Surface - Lumen

Executive Summary Last fall, Black Lotus Labs discovered in the wild what had until then only been theorized: Linux binaries were being used as loaders in Windows Subsystem for Linux (WSL). Since our initial report, Black Lotus Labs continues to monitor the WSL attack surface for new developments. In the last few months, we have

Malware - Lumen

New HiatusRAT router malware covertly spies on victims - Lumen

Implications of Windows Subsystem for Linux for Adversaries

Qakbot: retool, reinfect, recycle - Lumen

Emotet Redux - Lumen

Developing in the Windows Subsystem for Linux with Visual Studio Code

About Lumen - Lumen

Did you really believe that it was safe to use WSL (Windows

Black Lotus Labs - Lumen

Windows Subsystem for Linux gets new 'mirrored' network mode

Windows Subsystem for Linux (WSL): Threats Still Lurk Below the

New HiatusRAT router malware covertly spies on victims - Lumen