I've been trying to research malware techniques lately, as malware analysis intrigues me. I've got a pretty heavy background in .NET, and based on my more than seven years experience in .NET, I feel that I could write a pretty complex piece of malware rather quickly if I was so inclined. Everything that I've seen suggests that malware written in .NET is for the "simple" or "unsophisticated" pieces of malware, why is that?
Obviously, I understand the differences between .NET and C/C++ in regards to the low level stuff. I also understand that .NET is much more easily reversible than C/C++, but still, I would think the benefit outweighs the cost here. Isn't it much quicker to write malware using .NET than C/C++? Especially now that all Windows 7 PCs ship with the .NET framework already installed.
Other than the "low level stuff", is there a reason that malware authors avoid .NET and use C/C++ instead that I'm not aware of? Why does it appear that in the underground "hacker" forums, everybody despises .NET?
For example, if I wanted to make a program that regularly checked a Twitter account for new commands to execute, I could easily do this in about an hour in .NET and just a few lines of code. In C/C++, this would be a lot more work, no?