The Trojan hides inside legitimate-looking apps and scans users' photo galleries for cryptocurrency wallet recovery phrases ...