Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls
Calif researchers built WeWorm, a zero-click worm exploiting a WeChat VoIP memory-corruption RCE that Tencent has now patched.
Calif researchers found a memory corruption flaw in WeChat's VoIP stack in July using LLM-assisted analysis and built working exploits within two days, then integrated them into WeWorm, which they call the first zero-click worm spreading through WeChat calls on iOS and Android. A crafted incoming call yields remote code execution with no user interaction, giving full control of the victim's WeChat account; the attacker only needs to be on the victim's friend list, easily achieved by compromising a contact first. Tencent confirmed the bug and shipped patches in WeChat Android 8.0.77 and iOS 8.0.76, and chaining with other OS bugs could yield full device control.
- Zero-click exploit succeeds even if the victim never answers the call
- Worm spreads by compromising trusted contacts and calling their friends
- Patched in WeChat Android 8.0.77 and iOS 8.0.76
- Vulnerability discovered with help of open-weight and frontier LLMs
- No in-the-wild exploitation reported; tested on test phones
- Malware
- WeWorm
From the original article
2 min read at infosecurity-magazine.com
The hacking tool, built using a combination of AI models, is effective against Android and iOS devices
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.