WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

A security firm called Calif has developed a worm that can take control of a WeChat account when the user receives an incoming call. The attack does not require the recipient to answer or interact with their phone in any way, but the caller must be an existing WeChat contact. The worm was demonstrated to spread between three test phones. The vulnerability was reported to Tencent, WeChat's developer, in July, and the company has taken action to address the issue since then.