How an Android-based Uber imposter could steal your keys