Samsung keyboard bug leaves 600 million phone users open to attack