Astaroth Spambot WhatsApp Contact-Grabber JS Execution via WebDriver execute/sync

Detects command-line execution associated with WhatsApp API contact synchronization, specifically looking for 'WPP.contact.getAllContacts' or 'WPP.contact.list' commands. This pattern may indicate automated or unauthorized scraping of contact lists via a messaging interface.