Story perspectives

Tencent Blocks Zero-Click WeChat Worm After California Report

9/8/2026

Summary

Story summary

Calif demonstrated a zero-click WeChat worm on Pixel 10a Android and iPhone 17e devices and reported it to Tencent, prompting a block.
The worm spreads via incoming calls from saved contacts, needs no interaction, and instantly gives account control.
Tencent released Android 8.0.77 and iOS 8.0.76 on 21 August, added server mitigation on 28 August.
Researchers said AI located the memory-corruption bug in about two days, and no real-world attacks have been reported.

1 of 1

Story summary

Calif demonstrated a zero-click WeChat worm on Pixel 10a Android and iPhone 17e devices and reported it to Tencent, prompting a block.
The worm spreads via incoming calls from saved contacts, needs no interaction, and instantly gives account control.
Tencent released Android 8.0.77 and iOS 8.0.76 on 21 August, added server mitigation on 28 August.
Researchers said AI located the memory-corruption bug in about two days, and no real-world attacks have been reported.