A "full" version of a banking app or social media client could be a perfect clone that sends your login credentials to a server in another country. Two-factor authentication won't save you if the malware steals your session cookies.
Locate the specific "Full" version of the app on the site and download the APK file. wwwapkprome full