The rootkit can hide in an innocuous thumbnail, primarily targets older versions of Android, and is highly difficult to remove.