Hackers are using a critical flaw in VMware as part of a ransomware campaign targeting thousands of organizations