Lots of malware will detect it's running virtualized and change behaviour (generally to "do nothing") and there are mitigations around this detection (removing

Lots of malware will detect it's running virtualized and change behaviour (generally to "do nothing") and there are mitigations around this detection (removing virtualbox/vmware specific serial numbers, virtualization drivers, etc) but exploits are hard, they are generally tied to a very specific version of very specific software in order to be successful, versions and products the author can't predict (are the hostile analysts running VMWare? Virtualbox? Xen? Mysteries...) and the target surface is likely very low since most malware is just going to be classified by some overworked junior analyst at an antivirus as "GENERIC.W32.RAT" well before it gets any sort of in-depth analysis and binned. Ultimately you shouldn't worry about VM escapes by any malware you're likely to come across, they're an academic threat. Weirdly, as a side effect of the first point, simply installing the virtualbox & vmware drivers on your real actual machine can stop a small subset of malware because it thinks it's running virtualized and shuts down