A supply chain attack of some kind. Perhaps the app was distributed via a private store app where the french authorities had some leverage. I wonder if we’ll find out.