WeChat worm can hijack accounts without victims answering calls
Researchers at Calif created a WeChat worm that could take over an account through an incoming call without any action by the victim. Tencent stated that it blocked the exploit for all users. The source provides no evidence that the flaw was used in real-world attacks.
CERT24