Researchers at security firm FireEye have discovered a malicious Android app that combines private data theft, banking credential theft and spoofing, and remote access.