Discussion yesterday on HN: https://news.ycombinator.com/item?id=28564123
From the article it sounds more like they used the subsystem to install the malware
Discussion yesterday on HN: https://news.ycombinator.com/item?id=28564123