WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
A WeChat worm demo took over iPhone and Android accounts through incoming calls from existing contacts; Calif says Tencent blocked the exploit.
More info