importantSYS.SOURCE: The Hacker News• 2026-09-08T17:24:29+05:30
WeChat Zero-Click Exploit Compromises Accounts via Unanswered Calls on iOS and Android
A zero-click exploit allowed a WeChat worm to compromise iOS and Android accounts via unanswered calls, with researchers reporting the flaw to Tencent which patched it. The vulnerability required the attacker to be a WeChat contact and did not require user interaction to execute.
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones.
The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their WeChat contacts. Calif reported the flaw to Tencent in July and says the company has since
*** END OF TRANSMISSION ***