>>165
>only be interested in keylogging etc for the purposes of stealing credit card info and accounts?
in that particular case symantec more or less points to a state actor/s.
from that document
"Finally, it is worth considering whether the author of the Crisis malware program was responsible for releasing
the threat into the wild. Some security product vendors and researchers believe that a group in Italy constructed
the Crisis malware as a product to sell to law enforcement agencies. In fact, several of the functions of the Crisis
malware, such as recording sounds and stealing address book information, are suitable for private investigations
or espionage. The brochure on the group’s website and the functionality of the Crisis malware are indeed quite
similar. However, this does not necessarily prove who was responsible for creating Crisis"
>Also, wouldn't it be fair to assume that if you had such malware/viruses/spyware on your Windows PC capable of breaking your anonymity etc, you would need to already be under some kind of back door attack from an adversary?
as with all things security you have to consider who you are, what you are trying to hide, from whom you are trying to hide it from, what their goals are and how far they are willing/capable of going.
it's not imposable that malware targeting whonix VMs on a mass scale exists, however probably more likely that malware targeting whonix exists for targeted use. if you are some average guy who just wants a little privacy and maybe even to buy a little weed online maybe don't worry so much, if you are a important political figure or someone who is running a drug market however, well maybe you should be a little more concerned.