WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
More on WeChat
Other advisories
- MediumCVE-2026-18964Das Schwebende Chat-Widget: Kontakt-Chat-Symbole, Telegramm-Chat, Line Messenger, WeChat, E-Mail, SMS, Anrufknopf – Das Chaty-Plugin für Wor...
- Not ratedosv:CVE-2026-68929FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
- MediumCVE-2026-32467Serverseitige Anforderungsfälschung (SSRF) im Abonnentenserver von Aotuman zum Abrufen von WeChat-Artikeln in Versionen bis einschließlich 2.
- MediumCVE-2026-32467Apoyl [Aotuman] Grab WeChat Articles: Server-Side-Request-Forgery (SSRF)
- Not ratedosv:MAL-2026-13520Malicious code in @aster110/cc2wechat (npm)
- MediumCVE-2026-15628Zhayujie chatgpt-on-wechat CowAgent: Server-Side-Request-Forgery (SSRF)
- MediumCVE-2026-15628Ein Sicherheitsproblem wurde in zhayujie chatgpt-on-wechat CowAgent bis Version 2.
- Not ratedosv:CVE-2026-15628zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery
Other news entries
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat AccountsNewsThe Hacker News
- ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and RootkitsNewsThe Hacker News
- WeChat worm could pwn a friend before they even answered the callNewsThe Register — Security
- Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOSNewsDark Reading
- „WeWorm“: Zero-Click-Wurm hätte alle Konten von WeChat übernehmen könnenNewsheise Security
Source: https://thehackernews.com/2026/09/wechat-zero-click-worm-took-over.html
ID