Cybercriminals customizing malware for attacks on virtual infrastructure