Researchers tricked Apple into approving an app loaded with malware