A Zero-Click Worm Exploited WeChat’s Incoming Call Feature, Leaving Millions Vulnerable
A disturbing vulnerability in the popular Chinese messaging app WeChat has left millions of users on both iPhone and Android devices exposed to a zero-click worm attack. The exploit, which was revealed earlier this week, takes advantage of WeChat’s incoming call feature to compromise user accounts without their knowledge or interaction.
The attack works by sending an infected call to a targeted user, who doesn’t even need to answer the phone for the malware to take hold. Once inside, the worm can spread from account to account, potentially giving hackers control over sensitive information and access to other online services linked to WeChat. The vulnerability affects both iOS and Android devices, highlighting the potential for widespread disruption.
WeChat’s incoming call feature allows users to receive calls without needing to be actively engaged with the app. Unfortunately, this convenience comes at a cost: it also creates an attack surface that can be exploited by malicious actors. The worm takes advantage of this vulnerability by manipulating the phone’s call handling system, effectively bypassing traditional security measures.
The implications are alarming: if left unchecked, such an exploit could lead to large-scale identity theft and unauthorized access to sensitive information. Moreover, the worm’s ability to spread from account to account means that compromised users may inadvertently infect their friends and family members, creating a ripple effect of vulnerability.
WeChat has taken steps to address the issue by issuing emergency patches for its app on both iOS and Android devices. However, it’s essential for users to be aware of this threat and take immediate action to protect themselves. This includes updating WeChat to the latest version and being cautious when receiving incoming calls from unknown numbers. As security experts caution, vigilance is key in today’s digital landscape.
In light of this incident, we urge readers to prioritize app updates and regularly review their account settings to prevent similar attacks.
Source: The Hacker News — 2026-09-08