The security breach allowed sophisticated attackers to sneak spyware into phones via a WhatsApp call.