The campaign is just the latest example of the increasingly sophisticated world of private zero-day exploit development, researchers said.