New Android malware Crocodilus spreads through Facebook ads disguised as banking apps, adds fake contacts to phones and steals financial data with advanced screen monitoring.