Report shows how an SMS exploit turns smartphones into tracking devices – and how 4G and 5G networks are abused