The North Korea-linked APT37 has been observed targeting Android users with spyware distributed via Google Play.