A Hacking Tool Built With A.I. Can Breach Phones Without a Click

Security researchers have successfully built a zero-click worm that targets the WeChat platform to hijack mobile phones. Because the attack is classified as zero-click, the target does not need to interact with a link, download a file, or answer the call for the breach to occur. This mechanism allows the worm to spread and compromise devices silently, bypassing traditional user-intervention security prompts.

The coverage focuses on the vulnerability within WeChat's call functionality, demonstrating how the platform can be weaponized to deliver a payload. By utilizing a worm-like distribution method, the tool can theoretically move from one infected device to another, expanding the scope of the breach across the user base of the messaging application without any manual action from the victims. This development is significant because zero-click vulnerabilities are among the most dangerous threats in cybersecurity.

Future observations will likely focus on whether WeChat implements a patch to close the vulnerability used by the researchers. Coverage does not yet specify if this tool has been deployed in the wild by malicious actors or if it remains a proof-of-concept created in a controlled research environment.