Spyware is marketed for law enforcement, but researchers have found journalists and commentators among its targets.