Smartphones running Google's Android software have been hijacked by an illegal botnet, according to a Microsoft researcher.