Android trojan Hirudo replaces genuine banking apps with modified versions to steal credentials and bypass security checks.