At least S$12 million lost in fake friend call scams since January; new variant involving Android malware