Researchers Built a Self-Spreading WeChat Worm in About a Week Using AI

The New York Times and Washington Post report that researchers at Palo Alto security firm Calif used advanced AI models to build a self-spreading mobile worm targeting WeChat in just over a week (some posts say about 8 days), demonstrating how AI is sharply lowering the barrier and timeline for developing cyberattack tools. Tencent says the relevant vulnerabilities have been fixed.

Confirmed

• The worm was built from scratch in a little over a week, with AI significantly accelerating development.
• The attack hijacks a contact's phone number to call the victim; answering or even just letting the phone ring leads to account takeover within seconds — a zero-click attack.
• Once infected, the worm hijacks the account, reads and sends messages, makes calls, and automatically spreads to all contacts on both iOS and Android.
• Experts estimate this type of worm could infect hundreds of millions of devices within hours.
• According to posts relaying the reporting, Tencent says the vulnerabilities have been patched.
• OpenAI CEO Sam Altman, responding at a G20 meeting in North Carolina last week, said cybersecurity faces an enormous challenge requiring urgent action.

Why it matters

• The case is widely read as a landmark showing AI disrupting the cybersecurity landscape: attack-tool development compressed from months to about a week, greatly increasing pressure on defenders.
• The zero-interaction, ring-to-infect mechanism leaves ordinary users almost no way to protect themselves, underscoring the importance of vulnerability patching and coordinated defense for messaging platforms.
• With coverage by two major outlets plus a public statement from OpenAI's CEO, the issue has moved from the security community into the public sphere.

2026-09-08 ~ 2026-09-09 · 6 related posts

• AI-built mobile worm can fully compromise any WeChat account in seconds, built in just over a week — dylfreed · 2026-09-08
• AI-Built Worm Could Hit Hundreds of Millions of Devices Within Hours, NYT Reports — toptickcrypto · 2026-09-09
• [source] AI Helped Build a Self-Propagating WeChat Worm in a Week; Tencent Says It Patched It — peterwildeford · 2026-09-09
• [source] AI-Built Hacking Tool Could Breach Hundreds of Millions of Phones Without a Click — pstAsiatech · 2026-09-09
• [source] AI-Built Hacking Tool Breaches Phones Without a Click; Altman Urges Cybersecurity Action — pstAsiatech · 2026-09-09

1 near-duplicate retellings: peterwildeford