Espionage groups have been using BlueMoon, an exploit kit chaining recent Chrome and Windows zero-day vulnerabilities.