Crowdstrike and Kaspersky found an infection in a communications app that delivered a backdoor, but deployed it only a few times.