Sophos uncovers 167 fake Android, iOS trading and crypto apps