It looks to be a weakness in the technology behind the virtual keyboard made by Swiftkey involving the Samsung Galaxys S4-S6. When the update process happens, hackers can replace certain files within Swiftkeys keyboard with malware. This will allow the hacker to intercept anything that is typed on the keyboard and can also include activation of the phones mic and camera.
Best of luck to you, especially of you have one of these devices.
