"WeWorm": Zero-click worm could have taken over all WeChat accounts (www.heise.de)

California-based security firm Calif has developed a groundbreaking worm, named “WeWorm,” that could compromise WeChat accounts with a "zero-click" attack, spreading seamlessly through a simple VoIP call without requiring user interaction. This vulnerability, affecting both Android and iOS devices, could have potentially taken over over a billion accounts, spreading through contacts as calls appeared to come from known users. Calif identified the flaw in WeChat's VoIP technology using AI, demonstrating a rapid discovery process that allowed them to create the exploit in just days, significantly faster than traditional methods. The significance of this development extends to the broader AI/ML community as it highlights both the capabilities and dangers of AI in cybersecurity. The exploitation of such vulnerabilities underscores the need for vigilance and robust security measures in popular applications. After reporting the bug to Tencent in July, the necessary patches were implemented by August, mitigating the threat. This incident not only showcases AI's potential for both good and malicious applications but also prompts important discussions about the balance of ethical AI development and cybersecurity safeguards in an increasingly interconnected digital landscape.