WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

Recent technology coverage from multiple outlets details how a United States-based firm built and demonstrated a zero-click computer worm capable of hijacking WeChat accounts across millions of iPhone and Android devices. According to the reports, the malicious mechanism allows the worm to spread through incoming phone calls, effectively taking over an account even before the intended recipient answers the call. This development highlights a severe vulnerability involving automated attack vectors targeting popular mobile messaging platforms. Coverage of the incident is distributed across several technology publications, including TechRadar, The Register, South China Morning Post, Semafor, Martin Cid Magazine, and PCMag.

The reports emphasize that the United States firm alerted WeChat to the artificial intelligence hacking tool following the demonstration. Specific outlets note that the AI-developed computer worm held the potential to compromise up to a billion accounts, drawing widespread attention from cybersecurity analysts and industry reporters tracking mobile platform safety. Background information provided in the coverage establishes that the exploit leverages artificial intelligence to facilitate the hijacking process through standard communication channels like phone calls. While the exact internal mechanics of how the worm interacts with the WeChat application architecture remain limited in public reports, the coverage underscores the growing capability of AI-driven tools to bypass traditional user interaction requirements, such as clicking a link or answering a call, to achieve complete device or account compromise.

Looking ahead, the coverage does not yet specify the full scope of any remediation patches released by the platform or how developers plan to permanently neutralize the vulnerability across both Apple and Android operating systems. Readers and platform users must monitor subsequent updates from security researchers and the platform itself to learn whether the disclosed zero-click worm has been successfully mitigated in subsequent software updates.