WeWorm – First zero-click worm to spread through WeChat calls (blog.calif.io)

Researchers have unveiled WeWorm, the first zero-click worm that exploits a vulnerability in WeChat calls, allowing it to compromise accounts without any user interaction. Upon receiving a malicious call, the affected WeChat account can be hijacked and used to spread the worm further among contacts. This breakthrough was achieved rapidly, with researchers utilizing AI to identify the bug and develop a remote code execution (RCE) exploit in just two days. The exploit has since been reported to Tencent, which has implemented mitigations for all users. This development is significant for the AI and machine learning community, as it highlights the potential of AI to accelerate cybersecurity measures by quickly identifying and addressing vulnerabilities in widely used applications. The researchers emphasize the importance of collaboration between nations to ensure online safety, despite geopolitical tensions. By leveraging AI, the community can enhance proactive defenses against emerging threats, ensuring greater protection for billions of users worldwide.