> A tiny app written by McAfee’s team was downloaded onto two brand new Android phones which were used for the message exchange.

Does this mean they installed malware on the devices before the messages were exchanged?