2FA app with 10,000 Google Play downloads loaded well-known banking trojan

A fake two-factor-authentication app that has been downloaded some 10,000 times from Google Play surreptitiously installed a known banking-fraud trojan that scoured infected phones for financial data and…