ThreatFabric said the campaign has evolved since last year, employing sophisticated methods and mainly targeting Samsung devices