Hacker News Reader

Well, Guest-to-Host escape is a thing, so I wouldn't bet on that with that much confidence, but that's definitely the alternative.

Malware developers with those skills are probably working with APTs and hunting bigger fish.