During a cyberattack in Hong Kong, LightSpy spyware infected the iPhones of people visiting counterfeit news sites.