Silver Fox Python WhatsApp Stealer File Creation
Detects the creation of specific file artifacts (WhatsAppData.zip, whatsapp_backup.lock) associated with a Python-based WhatsApp stealer deployed by the Silver Fox (Void Arachne) intrusion set. This malware is designed to collect credentials and host data.
Sigma
