An Android app claims to download a copy of “The Interview” but instead installs a two-stage banking Trojan onto victims’ devices.