Virtualization/Sandbox Evasion

Named by 2 kept items in this workspace.

Search every workspace for Virtualization/Sandbox Evasion. It matches the name as written, so it can find other things that share it.

The items that name it 2

Socket: FUNNULL iOS Spyware Campaign via 13 Malicious Packagist Themes
writeup2026-09-01
Devtools-detection redirect and anti-analysis blocking of F12/right-click with infinite debugger loop
Socket: 5 Malicious NuGet Packages Target Chinese .NET Developers
writeup2026-05-07It is written here as Virtualization/Sandbox Evasion: System Checks.
22 hardcoded SHA-256 hashes forming an internal blocklist checked against sandbox usernames, computer names, and analyst-tool process names.

All techniques in this workspace.