Whilst pondering about security, and setting up different VM for certain online activities deemed more risky or requiring extra security (banking, or visiting untrusted websites, etc), I came to think about how such a setup (different VMs for different uses) would defend me against a keylogger.
So, two questions then:
1: If a keylogger has been installed inside a VM, can it capture data outside its own VM?
2: The opposite, does a keylogger in a host capture strokes typed within a VM residing in that host?
My bet would be No and Yes respectively, but I really have no idea. Anyone else does?