{"id":539032,"date":"2021-09-16T08:01:10","date_gmt":"2021-09-16T12:01:10","guid":{"rendered":"https:\/\/www.marketnewsdesk.com\/index.php\/theory-confirmed-lumen-black-lotus-labs-discovers-linux-executable-files-have-been-deployed-as-stealth-windows-loaders\/"},"modified":"2021-09-16T08:01:10","modified_gmt":"2021-09-16T12:01:10","slug":"theory-confirmed-lumen-black-lotus-labs-discovers-linux-executable-files-have-been-deployed-as-stealth-windows-loaders","status":"publish","type":"post","link":"https:\/\/www.marketnewsdesk.com\/index.php\/theory-confirmed-lumen-black-lotus-labs-discovers-linux-executable-files-have-been-deployed-as-stealth-windows-loaders\/","title":{"rendered":"Theory confirmed: Lumen Black Lotus Labs discovers Linux executable files have been deployed as stealth Windows loaders"},"content":{"rendered":"
\n

PR Newswire<\/p>\n<\/p><\/div>\n

\n

\n DENVER<\/span>, Sept. 16, 2021<\/span> \/PRNewswire\/ — Black Lotus Labs<\/a>, the threat intelligence arm of Lumen Technologies<\/a> (NYSE: LUMN), has proven<\/a>\u00a0what was previously just a theory: threat actors can use a Linux binary as a loader designed for Windows Subsystem for Linux (WSL) to inject malicious files into a Windows running process.<\/p>\n

\n

\n
\n \"Black
\n <\/a>\n <\/p>\n<\/p><\/div>\n

Black Lotus Labs proved what was previously just a theory: Linux binaries can be used as backdoors to gain access to WSL<\/div>\n

Back in 2017, researchers theorized<\/a> that Linux binaries could potentially be used as backdoors to gain access to WSL, but there has never been evidence of such activity in the wild until now. Today’s findings<\/a> from Black Lotus Labs proves that it is not only possible \u2013 it’s actually happening \u2013 and samples have been actively developed to abuse this attack surface. This could make it a threat to any machine on which the local system administrator has already installed WSL.<\/p>\n

“Threat actors always look for new attack surfaces,” said Mike Benjamin<\/span>, Lumen vice president of product security and head of Black Lotus Labs. “While the use of WSL is generally limited to power users, those users often have escalated privileges in an organization. This creates blind spots as the industry continues to remove barriers between operating systems.”<\/p>\n

\n Key Findings:<\/b>\n <\/p>\n