Malicious Pokémon Go app is putting Android phones at risk