It has been spotted employing a VMware ESXi zero-day vulnerability to get escalated privileges on guest virtual machines.