AI-aided WeChat worm hijacks accounts via zero-click calls
Security firm Calif demonstrated a zero-click worm that hijacks WeChat accounts via incoming calls, requiring no user interaction. The exploit, found using AI, spreads across Android and iOS devices by leveraging compromised contacts. Tencent mitigated the flaw server-side in August 2026, though technical details remain undisclosed.