It is worth reading this script “Hacking Your Phone” from CBS 60 Minutes aired on April 17, 2016.
SS7 vulnerabilities are not new and should be known to the carriers. As usual the problem is on patching and implementing security measures to prevent illegal access to the network (in this demonstration they were legally granted access to SS7).
Malware and what it can do on phones, tablets, PCs etc. should be well known, at least to those who care about IT security.