“Can the VM be infected?”
security.stackexchange.com