WeChat Security Advisory - Contact Information

NOTICE: WeChat is no longer provided as a public contact method due to significant security and privacy vulnerabilities documented below.

📋 Executive Summary

After thorough security analysis and multiple documented incidents, WeChat has been identified as an unsuitable platform for communications. This advisory details the specific vulnerabilities and privacy violations that led to this decision.

🔍 Documented Security Incidents

CVE-EQUIVALENT: Personal Data Exposure via Telegram Social Engineering Databases

• WeChat user data frequently appears in "social engineering databases" (社工库) on Telegram
• Attackers can perform "doxxing" (开盒) using WeChat numbers to obtain:
  - Real names and ID numbers
  - Home addresses
  - Phone numbers
  - Associated accounts

DATA BREACH: Shanghai Suishenma (随申码) Health Code Leak

• Massive data breach exposing millions of Shanghai residents
• WeChat integration led to correlation of health data with personal identities
• Demonstrated systemic vulnerability in WeChat-integrated government systems

PRIVACY VIOLATION: Unauthorized Hardware Access in Android

• Documented cases of WeChat accessing camera without user consent
• Microphone activation in background processes
• Continuous location tracking even when "location services" disabled
• Network traffic analysis reveals data transmission to undisclosed servers

CENSORSHIP ENGINE: Content Manipulation & Surveillance

• Automatic content deletion in WeChat articles (公众号文章)
• Real-time monitoring of Moments (朋友圈) with retroactive content removal
• Account suspension without appeal process
• Keyword filtering affecting private conversations
• Image recognition for "sensitive" content detection

Recent security research has also revealed:

Mini-programs lacking proper sandboxing
Voice message analysis and transcription without consent
Cross-app data sharing with other Tencent products

📨 My Other Contact Methods

Mastodon: [https://geoywang.github.io/contact/mastodon]

Bluesky: [https://geoywang.github.io/contact/bluesky]

Instagram: [https://geoywang.github.io/contact/instagram]

Session: [https://geoywang.github.io/contact/session]

🛡️ Security Recommendations

For individuals still using WeChat:

IMMEDIATE ACTIONS REQUIRED:

Disable location services completely

Revoke camera and microphone permissions

Use different phone number for other stuff

Never share sensitive information via WeChat

Regularly audit and delete chat history

Consider complete platform migration

⚠️ WECHAT SECURITY ADVISORY ⚠️

📋 Executive Summary

🔍 Documented Security Incidents

📨 My Other Contact Methods

🛡️ Security Recommendations