The Windows version of Crisis, a piece of malware discovered in July, is capable of infecting Windows Mobile devices and removable USB drives. Crisis is distributed via social engineering attacks that trick users into running a malicious Java applet. The threat uses three methods to spread itself: one is to copy itself and an autorun.inf file to a removable disk drive, another is to sneak onto a. virtual machine, and the final method is to drop modules onto a Windows Mobile device. The Symantec researchers don’t know what these modules do yet.
Source: https://thehackernews.com/2012/08/hijacking-virtual-machines-with-crisis.html