No distribute antivirus scanners (NDSs) provide cybercriminals with the ability to test the stealthiness of their malware before ever using it. As NDSs do not distribute hashes, they’re the ideal cybercriminal testing ground, and threat actors have taken note. Together we will explore these malware laboratories, examining how they work and their larger impact on the malware landscape.