Threat actor targeted pro-democracy activists by enticing them to download and install malware-laden Android apps, allowing the threat actors to remotely track and record conversations on compromised phones.