It's likely related to SS7
https://en.wikipedia.org/wiki/Signalling_System_No._7
Additionally, if you're connected to a evil twin tower, they can hold and decrypt your packets. Especially if you're sending messages over SMS and MMS. Those are trivial to decrypt if they're even encrypted to begin with.