Customers of six banks including two of Australia’s largest lenders have had their personal details stolen by fake banking apps on the Google Play store, an internet security firm said.