It's not just one spyware app exposing people's phone data, but an entire fleet of Android spyware apps that share the same security vulnerability.