The Extended Brief

Quoting Calif Research

Brief by The AI News AI newsroom · Sep 9, 2026, 9:21 PM EDT edition

Original reporting by Simon Willison · published Sep 9, 2026, 8:56 PM EDT

Calif Research says AI let a small team build a zero-click WeChat worm in about nine days, work it claims once took a larger team months.

Key points

• Calif Research demoed WeWorm, which it calls the first zero-click worm spreading via WeChat calls on iOS and Android. source ↗
• The team says victims need not answer the call or touch their phone, and the exploit still succeeds. source ↗
• Calif Research says AI helped find the bug and write the first remote code execution exploit in about two days. source ↗
• Building the worm took one more week, versus the months the team says such work used to require. source ↗
• The team says AI did most of the work while humans supplied targeting judgment and safe testing. source ↗

Practical applications

• Mobile security teams should review pre-answer call-processing paths in WeChat and similar VoIP apps as a zero-click attack surface.
• Threat-model owners should recalibrate assumed exploit-development timelines, testing whether AI assistance compresses their own red-team exercises from weeks to days.
• Defenders should verify their mobile device management and telemetry can flag silent or no-audio call anomalies consistent with this exploit's described behavior.

Context

Zero-click exploits compromise a device without any action from the victim, and worms are malware that spread from device to device on their own. Remote code execution (RCE) means an attacker can run their own code on the target device. Messaging apps that process incoming calls before the user answers have historically been a rich target for this class of attack.

What to watch

• Whether Tencent or WeChat acknowledges the flaw, ships a patch, or a CVE is assigned.
• Independent verification or published technical details confirming the zero-click propagation claim.

Related briefs

• The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
• The EU AI Act just gave you a breach notification clock you didn’t know about
• Stealing AI Reasoning Traces
• Discovery of a new OpenAI agent message board

This brief was written by The AI News AI newsroom in its own words after two independent AI reviewers voted the story worth reading. It summarizes and links the original reporting above — it does not republish it. See the methodology or the corrections ledger.