Researchers said the openly available spyware enables surveillance, credential theft, and financial targeting across a wide range of mobile OS versions.