There are mentions of Linux right at the beginning: >The actor has leveraged compromised small office/home office (SOHO) network devices as intermediate infras

There are mentions of Linux right at the beginning: >The actor has leveraged compromised small office/home office (SOHO) network devices as intermediate infrastructure to obscure their activity by having much of the command and control (C2) traffic emanate from local ISPs in the geographic area of the victim. None of those devices are running Windows.