Android malware pairs man-in-the-middle with remote-controlled banking trojan