As a data filetype, it cannot be infected by a virus.
Can it harbor malware? Yes. The program you use to access that
data could conceivably mishandle it and allow malware to execute.
Is it currently being done? I have no idea. It would be the *player*
or other data manipulation program you would have to ask about
for security information.
