Researchers have uncovered a campaign that turns Android phones into proxy nodes for malicious purposes.