Malware discovered by Symantec researchers sneakily spoofs Uber's Android app and harvests users' passwords, allowing attackers to take over the affected users' accounts. The malware isn't widespread, though, and most Uber users are not effected.