Security feature in OCBC app stopped malware from stealing at least $2m last month