OPSEC question

Hey everyone,
when I'm on my vm browsing on seemingly malicious websites, my host norton detects f.i. a malware attack.
But how is this possible? Doesnt that mean that my host pc gets infected via the vm? Im somewhat confused an hope that someone can explain whats going on.
I would greatly appreciate it.

Best Regards,
Kost

Are you saying that Norton Is Installed on the Host (physical machine) and It detects the activity performed on the Guest (VM), on each and every malicious website visited?

:blush:

(07-10-2020, 05:06 AM)mothered Wrote:

[To see links please register here]

Are you saying that Norton Is Installed on the Host (physical machine) and It detects the activity performed on the Guest (VM), on each and every malicious website visited?

Yes thats what I mean

(07-10-2020, 11:33 AM)Kostolany Wrote:

[To see links please register here]

:blush:

(07-10-2020, 05:06 AM)mothered Wrote:

[To see links please register here]

Are you saying that Norton Is Installed on the Host (physical machine) and It detects the activity performed on the Guest (VM), on each and every malicious website visited?

Yes thats what I mean

Have you configured a Bridged or NAT connection from Host to Guest?

(07-10-2020, 12:18 PM)mothered Wrote:

[To see links please register here]

(07-10-2020, 11:33 AM)Kostolany Wrote:

[To see links please register here]

:blush:

(07-10-2020, 05:06 AM)mothered Wrote:

[To see links please register here]

Are you saying that Norton Is Installed on the Host (physical machine) and It detects the activity performed on the Guest (VM), on each and every malicious website visited?

Yes thats what I mean

Have you configured a Bridged or NAT connection from Host to Guest?

I really dont know to be honest

(07-10-2020, 04:36 PM)Kostolany Wrote:

[To see links please register here]

Im running win 10 on oracle vm

VirtualBox.

Go Into "Settings", and select the "Adapter" tab that's connected to your Host NIC. Under that, you'll see "Attached to", which will be Bridged, NAT or Host-only. Please provide the connection type.

(07-10-2020, 04:36 PM)mothered Wrote:

[To see links please register here]

(07-10-2020, 01:48 PM)Kostolany Wrote:

[To see links please register here]

(07-10-2020, 12:18 PM)mothered Wrote:

[To see links please register here]

Have you configured a Bridged or NAT connection from Host to Guest?

I really dont know to be honest

What type of VM are you running?

Im running win 10 on oracle vm

(07-10-2020, 04:45 PM)mothered Wrote:

[To see links please register here]

(07-10-2020, 04:36 PM)Kostolany Wrote:

[To see links please register here]

Im running win 10 on oracle vm

VirtualBox.

Go Into "Settings", and select the "Adapter" tab that's connected to your Host NIC. Under that, you'll see "Attached to", which will be Bridged, NAT or Host-only. Please provide the connection type.

It is attached to NAT

(07-10-2020, 01:48 PM)Kostolany Wrote:

[To see links please register here]

(07-10-2020, 12:18 PM)mothered Wrote:

[To see links please register here]

(07-10-2020, 11:33 AM)Kostolany Wrote:

[To see links please register here]

:blush: Yes thats what I mean

Have you configured a Bridged or NAT connection from Host to Guest?

I really dont know to be honest

What type of VM are you running?

(07-10-2020, 04:47 PM)Kostolany Wrote:

[To see links please register here]

(07-10-2020, 04:45 PM)mothered Wrote:

[To see links please register here]

(07-10-2020, 04:36 PM)Kostolany Wrote:

[To see links please register here]

Im running win 10 on oracle vm

VirtualBox.

Go Into "Settings", and select the "Adapter" tab that's connected to your Host NIC. Under that, you'll see "Attached to", which will be Bridged, NAT or Host-only. Please provide the connection type.

It is attached to NAT

Switch (or create another virtual adapter) to "Bridged Adapter" and see If you're still experiencing the same Issue.

A VM Is an Isolated environment from the Host, so It doesn't make sense why your AV on the physical machine Is detecting activity In the virtual machine.