As cited
Copy frozen at (site build).
vulnerabilities
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
Researchers at Calif discovered a zero-click worm targeting WeChat that compromises accounts through incoming calls without user interaction, requiring only that the caller be an existing contact. The worm was demonstrated spreading across three test devices on both iOS and Android. Tencent received the disclosure in July and has since taken action.
Why it matters: WeChat users on iPhone and Android face account takeover risk from any contact initiating a call; patching status and user mitigation options require immediate clarity from Tencent.
- Source published
- First seen by Cybersecurity Tracker