Zero-click worm spreads on iPhones and Android via WeChat calls

A zero-click worm can spread between iPhones and Android devices through WeChat calls, allowing attackers to hijack accounts even without victims answering. Dubbed WeWorm, the proof-of-concept attack exploits a memory corruption vulnerability in WeChat’s Voice-over-IP (VoIP) stack. Calif reported the flaw to Tencent in July, and the company has since deployed mitigations that the researchers … The post Zero-click worm spreads on iPhones and Android via WeChat calls appeared first on CyberInsider.