496
Novel attack against virtually all VPN apps neuters their entire purpose
(arstechnica.com)
This is a most excellent place for technology news and articles.
We're already assuming you have something that can compromise DHCP. Once you make that assumption who's to say you don't have a VM hanging out.