WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls Swati KhandelwalSep 08, 2026Vulnerability / Mobile Security Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their WeChat contacts. Calif reported the flaw to Tencent in July and says the company has since blocked the exploit for all users. No attacks using the flaw have been reported, and Calif does not say there were any. Attacks that require no action from the target,…