They are not attempting to break the encryption. As is often the case, they’re not doing that hard thing, just doing much easier things like sending malicious QR codes to Signal users wrapped up as announcements from trusted people. It’s in the article.

You could… read the article 🙃