DarkSword has been used by hackers to target users in Saudi Arabia, Turkey, Malaysia and Ukraine, finds Google's threat intelligence team.