Banking companies are increasingly using application programming interfaces that transfer customer information to third-party money-management apps popular with consumers. But fraudsters are exploiting vulnerabilities in the technology to steal information.