Commercial spyware targeted Samsung Galaxy users for months