All Sky's Android apps were hacked and replaced

Did they also actually replace the .apk files? How does that work with regards to code signing?