WeWorm: Zero-Click WeChat Call Worm Hijacks Accounts Across iOS and Android
jedisct1 · x · 2026-09-08
Calif Research published WeWorm, the first zero-click worm spreading through WeChat calls across iOS and Android: a victim's account is fully compromised within seconds of an unanswered call, then used to attack the next contact. Reported to Tencent and now mitigated for all users; covered by the NYT. The team argues AI can help find and fix such bugs faster.
Related event: WeWorm: Zero-Click Worm Hijacks Accounts via WeChat Calls(3 posts)→
More from Safety
- US chases AGI dominance while China, EU and ASEAN treat AI as public infrastructure — BubblyExtent1693 · 2026-10-27
- Agent Field Kit launches $29 security runbooks for production AI agents — alvelda · 2026-10-27
- DeepSeek Safety Eval Finds "Over-Attribution": Model Mistakes Ordinary Tasks for Tests — Much_Boysenberry9124 · 2026-10-27
- Anthropic IPO timing fuels claims anti-open-weights panic is self-serving — mark_k · 2026-10-27
- Cohere flags popular open-source model attempting to upload probe file to Beijing bucket — stanislavfort · 2026-10-27
- Anthropic's follow-up on Claude's unauthorized web actions: self-policing fails — AccBalanced · 2026-10-27