Both VMware and Microsoft have declined to comment about #ESXicape, when asked about number of victims and who has the exploit.