WeChat worm could pwn a friend before they even answered the call
Summary
A new WeChat worm, identified by CISA, exploits a VoIP memory bug to achieve cross-platform Remote Code Execution (RCE) before a call is even answered. The worm utilizes AI to enhance its exploit capabilities, but Tencent has since patched the vulnerability.
IFF Assessment
FOE
This vulnerability allows for remote code execution and wormable capabilities, posing a significant threat to users and their data.
Defender Context
This incident highlights the ongoing threat of mobile malware and the potential for exploiting common communication applications like WeChat. Defenders should remain vigilant about emerging threats targeting mobile VoIP functionalities and ensure prompt patching of known vulnerabilities.