The free mobile app attracted over 50,000 downloads before Google took it down. The Trojan will secretly try to access banking apps on the user's phone.