Security experts are reporting a new Joker malware variant that uses Github pages and repositories to evade detection on Android devices while spying on victims.