geb2 Since GOS developers think it's malware, it would help if you listed every App you had downloaded at the time.
I also use FOSS Apps and think this may have happened to me about a month ago. I had a call after the screen is locked. I figured I pressed something incorrectly, despite swearing I hadn't, but then I figured it was more likely that I had pressed the wrong thing.
It's hard to know what happened.
It would be good if GOS had an enable log feature (if people chose it) so there could be a "send last 24 hours of logs" to developers option.
Were you using a VPN or Orbit and were you using WiFi or cellular?
What sort of WiFi router do you use?