Security researchers have found a fake app pretending to be a version of the messaging app Telegram, and hackers are using the app to spread malware.