VM Rootkits: The Next Big Threat?

[Meriadoc]

http://www.eweek.com/article2/0,1895,1936666,00.asp

Once the target operating system is hoisted into a virtual machine, the rootkit becomes impossible to detect because its state cannot be accessed by security software running in the target system

[Mrkvonic]

Hello,
The Next Big Scare I would call it.
It says to plant the rootkit you need to execute code ... wow, really. Execute code on a computer?
OK, let's say someone executes this code - and infects his virtual machine operating system (from within the virtual machine, I believe). All the user has to do is delete the machine and start over. Very ... simple. But if the rootkit affects the virtualization software, then it infects the actual host, and in that case, we're back to the good old basic getting yourself infected thingie. Nothing new or special. Just another possibility of getting creamed.
But running code on a computer ... that's new.
Mrk

[Paranoid2000]

Discussed here

[Bubba]

Thanks Meriadoc....we'll continue with the existing thread concerning this article.

VM Rootkits: The Next Big Threat?