I'm not so sure about that.

It looks like they were copying out the contents of an online test/exam, and the "listen" could've been a recording that's played back (to make the test accessible to deaf/HoH folks).

The student might've included that button/link text when selecting, before doing their copy+pasta.

I don't believe any fancy "attack" happened here.