Hackers have developed Android malware known as the Chameleon Android banking, trojan capable of disabling biometric security to steal PINs and data.