Paper compares WeChat and Telegram MiniApp security designs
The qualitative study derives cross-platform analysis requirements and does not claim validated vulnerability findings.
Stories per day · 30 days
Relatedtelegram3android2sideloading2spyware2account-takeover1miniapps1mobile-security1super-apps1ucreater1
11 stories, newest first · one card per story
Stories tagged #wechat
Rentable Android spyware uCreater targets WeChat, Telegram and wallets
YingGai hooks sideloaded apps to steal chats, OTPs and wallet data and can spoof camera checks.
uCreator Android spyware steals Telegram 2FA and clones WeChat
The rentable kit hides in sideloaded Telegram and WeChat copies; its code and C2 match Doctor Web’s Baohuo.
A Wuhan court just made AI production costs a legal factor in copyright infringement cases
A Wuhan court counted AI token and licensing costs in damages for a copied AI short drama.
Quoting Calif Research
Calif Research demos WeWorm, an AI-built zero-click worm that spreads via WeChat calls on iOS and Android without user interaction.
Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls
Calif researchers built WeWorm, a zero-click worm exploiting a WeChat VoIP memory-corruption RCE that Tencent has now patched.
WeChat worm could pwn a friend before they even answered the call
Calif researchers demoed WeWorm, a zero-click WeChat VoIP memory-corruption worm enabling account takeover; Tencent patched it August 21.
WeChat Worm Can Hijack Accounts Without Victims Answering Calls
Researchers demoed WeWorm, a zero-click WeChat worm hijacking accounts via incoming VoIP calls using a memory corruption flaw; Tencent patched it in August.
2
“Zero-click” WeChat worm could hijack accounts and spread via a single call
Researchers discovered a critical memory corruption flaw in WeChat's VoIP stack enabling a zero-click worm, WeWorm, that hijacks accounts via calls; Tencent patched it.
WeWorm – First 0-Click Worm Spreading Through WeChat Calls Across iOS and Android
Researchers demonstrated WeWorm, a zero-click worm exploiting a memory-corruption flaw in WeChat's VoIP stack to spread via calls across iOS and Android.
WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
Researchers demonstrated a zero-click WeChat worm that hijacked accounts via incoming calls; Tencent blocked the exploit server-side after July disclosure, no real attacks reported.
4