Android trojan targets over 400 apps, including crypto and fintech