Hackers are using a fake Zoom update to install a corporate workforce monitoring tool that operates covertly and is often missed by antivirus programs.