It is illegal to change WeChat to someone else's avatar and mobile phone number. The Cyber Security Law clearly stipulates that it is forbidden to steal other people's online accounts or personal information, and it is also forbidden to illegally obtain, sell or provide other people's personal information. Replacing someone else's avatar and mobile phone number with your own is undoubtedly an act of stealing other people's personal information, which violates the provisions of the network security law.