Kaspersky says Keenadu may be embedded on devices or downloaded from app stores and used for ad fraud.