Latest version of AndroRAT adds ability to steal browsing history, take front facing photos, screenshots and more -- and millions of older devices are potentially vulnerable.