Windows 10 and Linux subsystem vulnerability

[John Connor]

http://thehackernews.com/2017/09/windows-10-linux-evade-malware.html

Microsoft has been expressing its love for Linux for almost three years now, and this love costs Microsoft an arm and a leg.

Last year, Microsoft surprised everyone by announcing the arrival of Windows Subsystem for Linux (WSL) in Windows 10, which brings the Linux command-line shell to Windows, allowing users to run native Linux applications on Windows system without virtualization.

However, security researchers from security firm Check Point Software Technologies have discovered a potential security issue with the WSL feature that could allow malware families designed for Linux target Windows computers—undetected by all current security software.


The researchers devised a new attack technique, dubbed Bashware, that takes advantage of Windows' built-in WSL feature, which is now out of beta and is set to arrive in the Windows 10 Fall Creators Update in October 2017.