Hundreds of millions of users at risk from malware implanted in one of China's most popular apps, experts say