You've used many of these without even knowing it.
A new Android malware called Perseus is checking user-curated notes to steal sensitive information, like passwords, recovery ...