Hackers are exploiting a bug in the Signal clone app, TeleMessage, to steal users' private data and passwords, according to cybersecurity researchers.