Question

Could VirusTotal be used by attackers to test their own malware before distributing it to ensure that it does not trigger an AV alert?

Answer 1

This is one of the reasons attackers shun malware scanning sites like VirusTotal and Payload Security. ... Using a no-distribute scanner allows the attacker to test the malware against the AV engines without the risk of AV vendors learning about the file.

hope it helps you ✌️