Rootkits is becoming more and more sophisticated and harder to detect.
The proof-of-concept rootkit called SubVirt exploits known security flaws and drops a VMM (virtual machine monitor) underneath a Windows or Linux installation. This rootkits becomes impossible to detect because its state cannot be accessed by security software running in the target system.
