New Android Trojan app exploits previously unknown flaws, researchers say