Malware in the app can drain bank accounts and take over your mobile device -- though Google says Android users are "automatically protected" against the app.