An active exploitation campaign targeting a critical vulnerability in VMware vCenter software has compromised systems in 47 countries, with researchers observing 361 unique victim IP addresses.