Looks can be deceiving, so much so that the familiar icon could mask malware designed to steal your data and money.