Perhaps this has some clues as to how the SMS code was intercepted:

https://www.theverge.com/2017/6/13/15794292/ss7-hack-dark-we...