Mysterious Elephant Whatsapp Data Exfil

Tim Peck@timpeck

•updated Oct 15, 2025•1•1•83

Detects a process accessing multiple sensitive files in WhatsApp or Google Chrome data folders, a technique used by Mysterious Elephant APT's exfiltration tools (Uplo, Stom, ChromeStealer).