Only update or install financial software via the Google Play Store.

You install the APK, but the "glitch" never works. Meanwhile, the APK subscribes you to premium SMS services (costing $5–$10 USD per week), injects full-screen ads into your phone, and clicks ads in the background to generate revenue for the attacker.