Android users have been warned that a dangerous new hack attack uses optical character recognition to grab passphrases from your smartphone.