[LeanderK]

I talked to a security researcher about it a few years ago and as I understood it it's a cat and mouse game. They are trying to mimic real phones but the malware authors always find a new way to tell whether it's fake.

[imwillofficial]

I’m not aware of any steps security researches take to obscure the fact they are running in a VM from malware.

[luch]

now you do : https://github.com/Cisco-Talos/vboxhardening

[imwillofficial]

Thank you!