Did I miss something or does the article skip from explaining that it is Sirius, a ToDo-app, to a disguised banking app without any further clarification or reasoning?

yeah. this can happen a lot of times. i once downloaded a lot of malware from Play Store, personally never used App Store as I hate Apple because of their pricing