Sandboxes have become popular tools to analyse and detect malware. Not surprisingly, malware authors have devised increasingly sophisticated techniques to evade them. In this session, we discuss different tricks that malware in the wild uses to identify and thwart sandboxes. Then, we show how defenders can automatically evade the evasion and successfully turn the tables on attackers.