I verified the WeChat account hijacking situation, which might be due to my screenshot method. The prerequisite is obtaining the target user's account password, then sending a 6-digit verification code to two of the target user's frequently contacted WeChat friends. 1/ Account password - Various leaked data have a probability of being found 2/ Frequently contacted WeChat friends (tested that even without frequent contact, just added friends who haven't spoken but have chatted in common groups) - This is very good for advance preparation So, if I were an attacker, I would prepare conditions 1 and 2 in advance, start closing the net late at night, begin fraud, such as targeting crypto OTC trading fraud... So, don't randomly add people on WeChat, and change passwords that need to be changed. If you find a risk warning like the image, pay attention in time (it would be awkward if you're asleep). Currently, this is the information. If there's more, I will supplement it.