Published 2 months ago • loading... • Updated 2 months ago
Zero-Click AI Worm Can Hack WeChat Accounts Via Calls
On Tuesday, Palo Alto-based Calif disclosed WeWorm, described as "the first zero-click worm to spread through WeChat calls across iOS and Android," threatening over 1.4 billion users before Tencent patched the vulnerability.
Using AI, Calif discovered a "memory corruption issue in WeChat's VoIP stack" in two days and built the worm in one week, enabling attackers to take control of accounts without user interaction.
Once inside, the worm uses friend lists to self-replicate into delivery systems; former National Security Agency chief data scientist Vinh Nguyen warned the worm could reach hundreds of millions of devices.
Tencent stated there is no evidence that users were compromised, and customers do not need to update their apps, as Calif confirmed the flaw was mitigated for all users by August 28.
The disclosure follows an open letter signed by more than 100 technology companies, including OpenAI, warning that AI-enabled cyberattacks could become increasingly sophisticated, as Calif urges the industry to bolster defenses.
Security firm says it is 1st known computer worm capable of spreading across Apple's iOS, Google's Android operating systems without requiring users to click, tap