A Hacking Tool Built With AI Can Breach Phones Without a Click

Back to Devoured - September 09, 2026

DEVOURED

A Hacking Tool Built With AI Can Breach Phones Without a Click

The WeWorm exploit uses AI to execute zero-click attacks on WeChat, enabling unauthorized access to messages and calls without user interaction.

What: Security researchers identified WeWorm, a sophisticated attack vector that leverages AI to automate the compromise of WeChat accounts. The exploit requires no user engagement, such as clicking a link, to gain full access to private communications and account history.

Why it matters: This marks a transition in exploit development where AI is used to automate complex vulnerability chaining in messaging applications, significantly lowering the barrier for large-scale interception of encrypted data.

Deep dive

The WeWorm exploit automates the identification and triggering of vulnerabilities within the WeChat ecosystem.
It functions as a zero-click attack, meaning no interaction from the target is required for successful compromise.
The AI component likely handles the staging and delivery of payloads based on specific target device parameters.
Compromised accounts allow for full access to call logs, message history, and user contact lists.
The existence of such tools highlights critical weaknesses in the security posture of widely used mobile messaging applications.

Decoder

Zero-click attack: A software exploit that compromises a device without requiring any action from the user, such as clicking a link or downloading a file.
Payload: The malicious portion of a software exploit that performs the intended harmful action after the system is breached.

Original article

WeWorm is a zero-click attack that can compromise WeChat accounts without users doing anything and gain access to messages, calls, and accounts.

Explore all 55 articles in today's digest