The malicious apps were disguised as a legitimate mobile banking apps and were designed to steal user's online banking credentials.