The article is pretty light on technical details. As well, it lacks a definition of what is meant by "on a scale". Does it mean mass surveillance (malware installed on every phone they get hold off; or malware installed remotely with help of ISPs)?