VMDK Has Left the Building – Write Access

https://insinuator.net/2012/09/vmdk-malicious-patching/