I usually have one vm running for each wallet I download. And one vm for the trusted wallet. Everywhere they throw coins at you and you need to download the wallet to get them.. But you never know what's inside.
Yep, the best way to deal with the malware risk is to use virtual machines. I actually use virtual machines on a throwaway PC that doesn't have any bitcoins stored on it. Most malware is only looking for bitcoin and ether wallets anyway. You can't be too careful when it comes to this stuff.
Check out DeepOnoin:
https://deeponion.org/apply.php There are weekly airdrops for Jr. Members for 40 weeks. 6 Airdrops were already deployed but 34 are still coming.
They're not real airdrops. It's a signature campaign (bounty). Which is fine, but this thread is about airdrops.