Researchers Let AI Find the Bug, Then Built a Worm That Rings You and Takes Your Account
Ourtake
No answer required, no sound required. Tencent patched it, but the worm was built in about a week, with AI doing most of the work.
What happened
Security startup Calif's researchers used large language models to find a remote code execution flaw in WeChat and built WeWorm, a tool that spreads via incoming calls on Android and iOS without the victim answering. Tencent confirmed the flaw and released patched WeChat versions after Calif reported it, and the researchers' account was initially banned.