Zero-Click WeChat Worm Hijacks a Billion Phones via Missed Calls
WeWorm: Zero-Click WeChat Worm
Calif built WeWorm, the first zero-click worm to spread through WeChat calls on iOS and Android. By simply calling a victim, it takes over their account and calls their friends, spreading phone to phone. The bug was found and exploited with AI in about two days, and a full worm demo was ready a week later. Tencent mitigated the exploit for all users in August.
All it takes is one lab accident or a person who grabs a half-finished version, to unleash something like WeWorm into the world before anyone is ready.