WeWorm zero-click worm spreads through WeChat
Quoting Calif Research
WeWorm demonstrates how AI can accelerate security exploits, highlighting the growing need for stronger protections in messaging platforms.
Calif Research developed WeWorm, the first zero-click worm that spreads through WeChat calls across iOS and Android. The victim does not need to answer the call or interact with their phone at all. The team used AI to find the bug and write the remote code execution exploit in about two days, with the worm completed in one more week.
Quoting Calif Research
Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...] The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...] Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about two days. Building the worm took one more week. A worm at this scale used to be the kind of thing that took a larger team months. AI can already do most of the work here. Our team provided the judgment about what to target and how to test it safely. — Calif Research , WeWorm Tags: ai-security-research , ai , llms , security , generative-ai
- IT之家09-08 09:59原文
