Remember a few months ago when someone was sending PMs to people, claiming they had video of them pulling drugs out of their mailbox, and posting a link to a video site? The site had a Java applet that installed a trojan downloader. I was able to examine that malware in a disposable WinXP VM running behind the Whonix Gateway without compromising my computer.