Fake Android App with 220,000+ Downloads Steals Banking Credentials