I have a VM box configured using NAT to my host OS. It seems I can ping to the machines in my LAN. If my VM box got infected somehow my malware while surfing, would the malware be able to infect machines in my LAN? thanks.
VM box --(virtualnetwork)--> Linux VM with iptables (NAT and restrict only port 80/443, etc) --(nat/bridge)--> Host PC
This will ensure infections in your VM box cannot spread laterally.
And also make sure your user accounts in the VM box are not the same as the ones on your network.