Calif Research 发布首个微信通话零点击蠕虫 WeWorm

AI 摘要

Calif Research 发布 WeWorm 演示，称这是首个通过微信通话在 iOS 和 Android 上传播的零点击蠕虫。受害者无需接听或操作手机，即使接听也听不到声音，攻击仍会成功。该团队借助 AI 在约两天内发现漏洞并写出首个远程代码执行（RCE）利用程序，再用一周构建蠕虫，并指出 AI 已能完成此类攻击的大部分工作。

正文节选

10th September 2026 Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...] The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...] Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about two days. Building the worm took one more week. A worm at this scale used to be the

发布时间：2026-09-10 08:56

抓取时间：2026-09-10 09:02

来源机构：Simon Willison