Hi @emdesan55, I'm really sorry to hear that you've been a victim of a phishing attack. Unfortunately, I don't think there's much you can do to get the money back without tracing the payment back to bittrex and successfully identifying the hacker by their bittrex account But this will be hard to do.
Others may have more innovative ideas as to how we can help you to retrieve the lose Steem/SBDs, so I leave the floor open for them to discuss it. At this point, my opinion is that you should think of the loss of ~25% of your account value as the cost of a lesson in security, and take steps to protect your account further! For example, you should never log in with your password, but instead with your posting/active keys as needed.
I know that this comes too late and it won't change what has already happened, but better a small loss now than a bigger loss in the future!
You are right. Thank you for your kind words @wilfredn. Good thing I was also notified by @ginabot.
Maybe tracing the hacker by his Google play account would be more effective than tracing it back through bittrex?
I'm not sure if it would lead back to the hacker, but Google must keep some record of who uploaded that dummy app.