A cybersecurity company says the malware guarantees continuous access to users' inboxes. Google says the threat is elsewhere.