My girlfriend's email sent out spam when she clicked on a link that ran this script on android? What exploit is it using? What is it doing?