Newly discovered spyware has sneaked into Apple’s App Store and Google Play to steal images from users’ mobile devices.