Security researchers at Calif built a proof-of-concept worm that hijacks WeChat accounts through nothing more than an incoming call, requiring no interaction from the person being called. In tests, the exploit spread automatically across three phones once the caller was already saved as a contact, working on both iPhone and Android. The team reported the issue to Tencent in July, and the response from the messaging giant is still part of the ongoing story.
// source: thehackernews.com ↗