Where Sources Agree

• arrows_inputZero-Click Attack Mechanism: Reporting largely establishes that the WeWorm exploit enables a zero-click attack on Android and iOS devices by leveraging the VoIP stack to spread automatically through contact lists without requiring user interaction, according to Calif research.
• arrows_inputVulnerability Mitigation Timeline: Outlets concur that Tencent addressed the WeChat vulnerability reported by Calif in July, mitigating the exploit for all users by August 28 with no evidence of compromise, according to official company statements.
• arrows_inputWeChat User Base Scale: Most coverage notes that WeChat supports 1.4 billion monthly active users; this massive user base underscores the potential impact of security vulnerabilities, according to company data.

Where Sources Disagree

• arrows_outputWeWorm Exploit Interaction Details: Reports vary slightly regarding user interaction with the WeWorm exploit; while some sources state no interaction is required, others note that declining the incoming call within seconds can prevent the exploit.
• arrows_outputExtent of Human AI Supervision: While some reports highlight that human researchers selected targets, supervised the development process, and tested the results, the company emphasized that AI is already capable of performing most of the work required to build the exploit.