New Android malware can spy on calls, SMS, and personal data as users are warned to avoid sideloading apps and strengthen device defenses.