> Is there any malware that detects that it's running under something like VirtualBox and changes is behaviour? Yup, see Blue Pill/Red Pill (https://stackoverf

> Is there any malware that detects that it's running under something like VirtualBox and changes is behaviour? Yup, see Blue Pill/Red Pill (https://stackoverflow.com/questions/154163/detect-virtualized-os-from-an-application https://stackoverflow.com/questions/154163/detect-virtualize...).