> TritonInfoSec News
Home / Sep 09, 2026 / Story
0
#4 The Hacker News general September 08, 2026 at 11:54 UTC

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

By [email protected] (The Hacker News)

AI Summary

Security firm Calif demonstrated a zero-click worm targeting WeChat that spreads via incoming calls on both iPhone and Android — the recipient does not need to answer or interact with their device for account takeover to occur. The attacker must be an existing WeChat contact, and the worm successfully propagated across three test phones in a proof-of-concept. Tencent was notified in July 2026 and has since patched the flaw.

Read full article → https://thehackernews.com/2026/09/wechat-zero-clic…

Relevance score: 89.0/100

# More from September 09

  1. 1
    Microsoft Plugs Nearly 1,000 Security Holes Krebs on Security
  2. 2
    Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell The Hacker News
  3. 3
    Adobe fixes critical Magento zero-day exploited to backdoor servers BleepingComputer
  4. 5
    DoppelCart fraud network uses 119,000 fake shops to steal credit cards BleepingComputer
  5. 6
    Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours The Hacker News
  6. 7
    N-able N-central Pre-Auth RCE Flaw Exploited in the Wild The Hacker News
  7. 8
    220 million traveler records exposed in Vietnam-linked APIS leak BleepingComputer
  8. 9
    ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account The Hacker News
  9. 10
    MikroTik Patches Critical Flaws Chained to Hack Routers SecurityWeek