Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls

Researchers at Calif demonstrated WeWorm, a zero-click worm that exploits a WeChat VoIP memory-corruption RCE to hijack accounts and potentially devices across iOS and Android via incoming calls; Tencent released patched app versions after disclosure, and the researchers emphasize AI-assisted discovery and rapid development of exploits.