Cloud phones are the latest tool to be used against banking app users and the security community should take notice.