Facebook cookie-stealing trojans surface on Android devices