Detecting infection traces from Pegasus and other APTs can be tricky, complicated by iOS and Android security features.