Windows Subsystem for Linux (WSL): Threats Still Lurk Below the (Sub)Surface - Lumen

Executive Summary Last fall, Black Lotus Labs discovered in the wild what had until then only been theorized: Linux binaries were being used as loaders in Windows Subsystem for Linux (WSL). Since our initial report, Black Lotus Labs continues to monitor the WSL attack surface for new developments. In the last few months, we have

WSL2 Forensics: Detection, Analysis & Revirtualization

Black Lotus Labs - Lumen

Implications of Windows Subsystem for Linux for Adversaries

Chaos is a Go-based Swiss army knife of malware - Lumen

Qakbot: retool, reinfect, recycle - Lumen

Connected Security - Lumen

Chaos is a Go-based Swiss army knife of malware - Lumen

Chaos is a Go-based Swiss army knife of malware - Lumen

Did you really believe that it was safe to use WSL (Windows

About Lumen - Lumen

John Jankowski on LinkedIn: Windows Subsystem for Linux (WSL

Malware - Lumen