Google Play apps downloaded 300,000 times stole bank credentials (Ars Technica)