A new and improved variant of the group’s malware combines fileless infection, BYOVD, and more to cause havoc in virtual environments.