Arh yes blame china again. That literally makes no sense in this case. You said yourself the Chinese are taking phones and installing spyware. Now even if you can't install the spyware directly in the iphone you'd only need a local running version of a website with the hack and access it yourself on their phone. You'd not set it loose on 1000s of websites and hope your targets get hit by it.