# WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls

> **Open Intelligence Dossier** · First detected: 2026-09-08 17:07 UTC · Category: Technology

## Executive Summary
Experts build an AI-developed WeChat worm that can hijack iPhone and Android accounts via a single unanswered phone call.

## Intelligence Brief
Recent technology coverage from multiple outlets details how a United States-based firm built and demonstrated a zero-click computer worm capable of hijacking WeChat accounts across millions of iPhone and Android devices. According to the reports, the malicious mechanism allows the worm to spread through incoming phone calls, effectively taking over an account even before the intended recipient answers the call. This development highlights a severe vulnerability involving automated attack vectors targeting popular mobile messaging platforms. Coverage of the incident is distributed across several technology publications, including TechRadar, The Register, South China Morning Post, Semafor, Martin Cid Magazine, and PCMag.


The reports emphasize that the United States firm alerted WeChat to the artificial intelligence hacking tool following the demonstration. Specific outlets note that the AI-developed computer worm held the potential to compromise up to a billion accounts, drawing widespread attention from cybersecurity analysts and industry reporters tracking mobile platform safety. Background information provided in the coverage establishes that the exploit leverages artificial intelligence to facilitate the hijacking process through standard communication channels like phone calls. While the exact internal mechanics of how the worm interacts with the WeChat application architecture remain limited in public reports, the coverage underscores the growing capability of AI-driven tools to bypass traditional user interaction requirements, such as clicking a link or answering a call, to achieve complete device or account compromise.


Looking ahead, the coverage does not yet specify the full scope of any remediation patches released by the platform or how developers plan to permanently neutralize the vulnerability across both Apple and Android operating systems. Readers and platform users must monitor subsequent updates from security researchers and the platform itself to learn whether the disclosed zero-click worm has been successfully mitigated in subsequent software updates.

## Multi-Source Evidence Table
| Source Outlet | Headline | Verification URL |
|---|---|---|
| TechRadar | Experts build WeChat worm able to spread across millions of iPhone and Android devices via phone calls | [Source Link](https://news.google.com/rss/articles/CBMi2AFBVV95cUxOcGszQUZoTEhvcXJJQ0t0eHZxVnVBZnJwRmRhbVQtZ2hYcWhqR0Z3N3owNS1IbDJUYTB6R1o2QVdyM0g2eDI5QjJUd2xweTNvUjUxNDRRTHpFdmZwczJWaTYzb1VqcnZOaVcxRlV3eHIyVDB6dFNHeGc0R2RFSjY5MmNjWG9WUWlTQkQxVjJSazhrOEF1VkdUQUthaks1cThRMTRQZEVJWUxsbVVMZmk3ajZBWHZXMVVBYWNrLVYyVWZfOHV0NDd3ZFRBOWswYUVPZ2RjbHYxcUs?oc=5) |
| The Register | WeChat worm could pwn a friend before they even answered the call | [Source Link](https://news.google.com/rss/articles/CBMivgFBVV95cUxPdGdqMzdSbDV5aEVSMmM1ZjFwRXVVbEtjUGZtLVRrdVdwa1JRa3pka0hYN0xMdk1CRDkyQmlaZjQ1UEZmNXdiZjd1dllxUlBtMFM5MU95N0JaN1lxLXBHTVFMbnZzVXhIYm1OWDY4VGJ5a25yLTVyMHA1ZkNGa3h3RmVfTTFfRVRyRGFnWTdldVowdlBQVnFqSzM5UlR0T19oNVBnTDZtQUFWQm54RHk3T3VOUDdZUjJENkNsSm1B?oc=5) |
| South China Morning Post | US firm shows how AI helped hijack WeChat account with just 1 unanswered call | [Source Link](https://news.google.com/rss/articles/CBMiuAFBVV95cUxQd0c3MWhBWWd3b3gtemdXWWZVTXpfSW9rQnNQUy1xck9HTklTaXRERW5VcE01QjFIUjhtb2llblVPWXluWVVtc3BESGIwdlY1Q2VRSElLU2pUOUw4UXp3aGdNekRNUkZCR1E5V3p5MGVCUTR1LWFFQXBMWjY3REtYc1I5M3pJRG9VTHYxaWZfZE1GOHd4OHQzWGJoNFgxSkFVYW84R3JnNEVWbnVWNFF5TUhpSXdwSDIw?oc=5) |
| Semafor | US firm alerts WeChat to AI hacking tool | [Source Link](https://news.google.com/rss/articles/CBMiiwFBVV95cUxOTHMwLW12OHdQSVhaYzhhbW05N25yZnhCbEVJLU9hRHd3LUxHWVlHNm5aN0NOZVNTUTdxc3ZOMlY4d1FKd0tNZUs3SmxNaDlxV09GSjUzaGc1VU1FblZFTkpjRXF0czhNWjA1cVpoQTJuVU43R1l0S1ZQOEtXUnVyUnprWWdWdkhpTHkw?oc=5) |
| Martin Cid Magazine | A missed WeChat call hijacks your account — AI wrote the exploit in two days | [Source Link](https://news.google.com/rss/articles/CBMijgFBVV95cUxNdjAyZUdTSWxDaGVoeV90MXFZZThKdWhjVnA4a3lQSHpMN2Q4dFFJUWZrTFFHY3M5bjNOaUJBZXhPRFRsUy11SDVjUjJIdy1RUURmdUJ0MjdFZjc2ako0Qk5lMVlFTWQxc0VUdUxCaUlSX1k3bm1sMTQtaGdaTk4xRkRYZk9Bb2ZOWk1RNHZR?oc=5) |
| PCMag | This AI-Developed Computer Worm Could Have Hijacked a Billion Accounts | [Source Link](https://news.google.com/rss/articles/CBMingFBVV95cUxNSl9YSG9yYWIwREsyZXBPZF9iNFVBenZWaC15MWdTc1A3UUVYd055U0NkZXdxYTlVUDVHVVItQ2I2Mm9GaGF2SlN6bUtMMENLdjRDUVNKS2RrVlN6d2hYUlZnMloyOHRRckItWUZ5MU1xb2VXTXEwV3hxbEdTcnQzc0hMNktUcmhCZ2QxNUdIaVliZl9JdmJZYUJlNDJmZw?oc=5) |

---
*Canonical Source: https://pulse.byoviral.com/trend/2026-09-08/wechat-zero-click-worm-took-over-accounts-on-iphone-and-android-via-incoming*