https://www.threatdown.com/blog/fakebat-campaign-continues-now-also-targeting-vmware-users/