
Malicious actors utilize virtualization-adjacent shell channels such as VMCI and VSOCK to bridge the gap between physical hardware and virtual environments. This sophisticated methodology represents a departure from the traditional focus on end-user devices, signaling a new era in which the core infrastructure of an organization is the primary target for exploitation. In the current landscape of 2026, the group










