MonitorMinor “almost impossible to detect” and is capable of collecting victim phones' unlock screen passwords, new Kaspersky research finds.