Google's threat analysis team says spyware made by RCS Lab targeted the phones using a combination of tactics including unusual 'drive-by downloads' that happen without victims being aware.