Researchers from the Russian security firm Kaspersky say they have found a watering hole that uses a full remote iOS exploit chain to deploy an implant named LightSpy.