WeWorm: Zero-Click WeChat Worm

Researchers at Calif have discovered WeWorm, the first zero-click worm that spreads through WeChat calls on both iOS and Android devices, requiring no user interaction or answer from victims. The worm can hijack WeChat accounts and automatically call a victim's contacts to spread itself, potentially compromising over a billion phones worldwide, and was built as a proof-of-concept in just over two weeks using AI assistance. The researchers published their findings to raise awareness about vulnerabilities in mobile messaging apps, emphasizing that while the exploit requires the attacker to be on the victim's friend list, compromising even one contact can enable widespread attacks.