1. For a host machine on which a set of virtual machines (VMs) execute, an encryption method comprising: detecting that a first VM in the set of VMs executing on the host machine is infected with malware by analyzing introspection data gathered from an agent installed on the first VM; and based on the detected malware infection, encrypting data messages transmitted by at least a second VM in the set of VMs executing on the host machine.