Researchers demonstrated WeWorm, an AI-powered zero-click worm targeting WeChat on iOS and Android. The malware hijacks accounts through a simple call that requires no user interaction.
The worm accesses messages and spreads autonomously by calling a victim's entire contact list. This cross-platform capability enables the rapid compromise of millions of devices.
Researchers warned that chaining this exploit with other vulnerabilities could grant attackers full device control. Tencent confirmed it has fixed the security flaw after being alerted by the research team.