Mandrake spyware threat actors resume attacks with new functionality targeting Android devices while being publicly available on Google Play.