Threat actors are abusing the QEMU machine emulator to hide their malicious activity within virtualized environments.