STAMBA: Security Testing for Android Mobile Banking Apps