Some mobile apps are being weaponized with Trojans that secretly sign Android users up for paid subscription services.