ESET research uncovers an Android app that initially had no harmful features but months later turned into a spying tool