Calif Research 展示 WeChat 零点击蠕虫 WeWorm
Quoting Calif Research
Calif Research 发布 WeWorm 演示，称其为首个通过微信通话在 iOS 和 Android 间传播的零点击蠕虫，受害者无需接听或与手机交互，即使接听也听不到任何声音。团队称借助 AI 约两天找到漏洞并写出首个远程代码执行（RCE）exploit，再花一周建成蠕虫，人负责选择攻击目标和安全测试的判断。
Today, we're releasing a demo of WeWorm, the first zero-click worm to spread through WeChat calls across iOS and Android. [...]
The victim does not need to answer the call, or interact with their phone at all. Even if they do answer, they hear nothing, and the exploit still succeeds. [...]
Working with AI, our team found the bug and wrote the first remote code execution (RCE) exploit in about two days. Building the worm took one more week.
A worm at this scale used to be the kind of thing that took a larger team months. AI can already do most of the work here. Our team provided the judgment about what to target and how to test it safely.
— Calif Research, WeWorm
来源：Simon Willison 博客 · simonwillison.net