designed to take over a smartphone. When the user then logs on to his bank account with the phone, the hacker could steal the user's bank credentials. Many mobile-banking apps don't account for a phone being compromised, said Jason Rouse, a wireless security expert with Cigital, a software consulting firm.