I think they are suggesting the app installed itself via some exploit in some messaging platform.

This lady could be one of the many people that don’t run updates often.

Sounds like it could also have been running in memory the way it was trying to prevent her from restarting.

Also this could have easily been on iOS as well, and fits the description of previous iOS exploits.