Popular authentication app pulled from Google Play for being financial malware