Security research

www.bleepingcomputer.com/news/security/new-malware-uses-windows-subsystem-for-linux-for-stealthy-attacks

https://www.bleepingcomputer.com/news/security/new-malware-uses-windows-subsystem-for-linux-for-stealthy-attacks/

Published on: www.bleepingcomputer.com

ATT&CK techniques those detections carry

T1218System Binary Proxy Execution
T1036.005Match Legitimate Resource Name or Location
T1112Modify Registry

5 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Potential WSL InstallLocation Registry Key Modification	Medium	SigmaHQ	Oct 3, 2026	Detection Rule License 1.1
Suspicious WSL Binary Masquerading	High	SigmaHQ	Oct 3, 2026	Detection Rule License 1.1
Suspicious WSL InstallLocation Registry Key Modification Via CommandLine	High	SigmaHQ	Oct 3, 2026	Detection Rule License 1.1
Suspicious WSL Binary Hijack via Proxy Execution	High	SigmaHQ	Oct 3, 2026	Detection Rule License 1.1
Potential WSL Binary Modification from Installed Location	Medium	SigmaHQ	Oct 3, 2026	Detection Rule License 1.1

Showing 5 of 5

Filter in the catalogue