The malware has been used to target people in Italy, Kazakhstan, and Syria, researchers at Google and Lookout have found.