Researchers at Citizen Lab found that NSO Group, an Israeli spyware company, had infected Apple products without so much as a click.