Fake Android banking apps may have stolen data of thousands: SophosLabs report