The San Francisco-based firm Lookout detected 172 fake Android apps, which offered crypto mining services but instead stole money from innocent users.