New features to take over smartphones and monitor user activity demonstrate the continued evolution of the malware, which is now being spread on GitHub.