WeWorm

The first zero-click worm to spread through WeChat calls across iOS and Android.

At Calif, our mission is to keep the Internet together by occasionally taking it apart. We believe everyone deserves a safe and secure Internet, including the people who cannot protect themselves. Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. This is the first installment in a series exploring zero-click attack surfaces in mobile messaging apps. WeChat is an "everything app" used by virtually everyone in China and by Chinese communities worldwide. Simply by calling a victim, WeWorm can hijack their account and call…

saved by

• Lucas Xia
• Vincent Huang

related reading

• Disrupting the first reported AI-orchestrated cyber espionage campaign \ Anthropicanthropic.com
• Countering misuse of AI: September 2026 / Anthropicanthropic.com
• Assessing Claude Mythos Preview’s cybersecurity capabilities \ Anthropicred.anthropic.com
• Project Glasswing: Securing critical software for the AI era \ Anthropicanthropic.com
• Stuxnet - Wikipediaen.wikipedia.org
• Hacking OpenAIhacktron.ai
• Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incidentyoutube.com
• Vulnerability Research Is Cooked - Quarrelsomesockpuppet.org
• How WeChat grew to be the #1 app in the world : YC Startup Library | Y Combinatorycombinator.com
• Greg Brockman on X: "Towards securing the internet" / Xx.com
• The Newest Instagram "Exploit" is the Goofiest I've Seen0xsid.com
• The rise of Moltbook suggests viral AI prompts may be the next big security threat - Ars Technicaarstechnica.com