Quoting Calif Research

Simon Willison's Blog News
security zero-click-exploit wechat ai-usage cybersecurity remote-code-execution

Summary

Calif Research demos WeWorm, a zero-click worm spreading through WeChat calls, with AI enabling rapid exploit development.

No content available
Original Article
View Cached Full Text

Cached at: 09/10/26, 02:14 AM

# A quote from Calif Research Source: [https://simonwillison.net/2026/Sep/10/calif-research/](https://simonwillison.net/2026/Sep/10/calif-research/) 10th September 2026 > Today, we're releasing a demo of WeWorm, the first zero\-click worm to spread through WeChat calls across iOS and Android\. \[\.\.\.\] The victim does not need to answer the call, or interact with their phone at all\. Even if they do answer, they hear nothing, and the exploit still succeeds\. \[\.\.\.\] Working with AI, our team found the bug and wrote the first remote code execution \(RCE\) exploit in about two days\. Building the worm took one more week\. A worm at this scale used to be the kind of thing that took a larger team months\. AI can already do most of the work here\. Our team provided the judgment about what to target and how to test it safely\. —[Calif Research](https://calif.io/research/weworm),WeWorm

Similar Articles

WeWorm: Zero-Click WeChat Worm

Hacker News Top

WeWorm is a zero-click worm exploit that spreads through WeChat calls across iOS and Android, potentially compromising over a billion accounts. Developed with AI assistance, it highlights the growing risk of advanced attacks becoming accessible to less skilled actors.

AI Worming through Word

Simon Willison's Blog

Håkon Måløy discovered a prompt injection variant that turns into a self-replicating worm in Microsoft Word's Copilot, propagating hidden instructions across documents. Microsoft had 144 days to fix but no full mitigation.

Adaptive Agentic Worms (8 minute read)

TLDR AI

Researchers have demonstrated adaptive computer worms powered by open-weight LLMs that can generate target-specific attacks and self-replicate, using stolen compute to evade conventional AI safeguards.