iPhone users across China installed an app promising porn and free movies—they got malware instead