Malicious mobile software continues to evolve—sometimes faster than defenses. One recent threat, Crocodilus, has shifted