[PunchyHamster]

Seems like way easier way would be sshing for the first time and just typing `sudo reboot`. If VM reboots, it is yours

Or cat-ing some secrets that would be on target machine but not attacker

[kardos]

A mitm does not redirect your ssh login to their machine