Active on Google Play Store as recently as last Friday, a mobile banking Trojan infected thousands of users who thought they downloading games or innocent-looking apps, according to research published by a trio of cybersecurity firms.