This was probably done with a malicious app install, not by attacking signal.