Malware known as the Chameleon banking trojan has been draining money from Android users' phones.