US Cybersecurity Firm Uses AI to Identify WeChat Account Hijacking Flaw
2 sources across 2 countries · Hong Kong · United Kingdom
Who reported this
- South China Morning Post
- The Register
What the colours mean
- Left
- Centre-left
- Centre
- Centre-right
- Right
- A hatched block means the outlet is affiliated with, or controlled by, a state.
Political lean describes where an outlet sits within the politics of its own country. It is never a position on a single global scale.
Political lean is comparable inside one country and not across them, which is why the bar groups by country first. Publicly funded broadcasters are not marked as state-linked.
The owner of each outlet is listed as a matter of record, not as a judgement about the outlet.
A US cybersecurity firm named Calif discovered a critical vulnerability in Tencent's WeChat app that could allow remote account takeovers via unanswered voice calls. The researchers developed an experimental exploit called WeWorm, which demonstrated that an attacker could take full control of a target account without the victim ever picking up the phone. Calif noted that AI was used to identify the flaw and develop the exploit, significantly accelerating a process that would have previously required months of work from larger engineering teams.
Tencent confirmed that a server side fix was deployed in late August and stated there was no evidence the vulnerability was exploited in the wild. The company expressed gratitude to the researchers for their cooperation. While the center leaning source focused on the technical capability of the worm to compromise users, the center right leaning source framed the event as a catalyst for renewed calls for bilateral cyber cooperation between the United States and China.
How each side framed it
- Centre
- The source focused on the technical threat and the ability of the worm to compromise users.
- Centre-right
- The source framed the discovery as a reason for increased cyber cooperation between the US and China.
Sources
90% of the statements in this article were traced back to the source articles listed above.