I think you're vastly overestimating the number of VMware backed browsers as well as the money to be made in a botnet. As well as the effort in actually setting

I think you're vastly overestimating the number of VMware backed browsers as well as the money to be made in a botnet. As well as the effort in actually setting all this up and maintaining opsec. I'm also not convinced a VMware escape is something people get killed over. The leaked "Hacking Team" data shows exploits aren't worth that much more on the market (iOS being a big exception).