Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 21:33:33 UTC
Home > List all groups > List all tools > List all groups using tool WAExp
 Tool: WAExp
Names WAExp
Category Malware
Type Info stealer
Description
(Kaspersky) This tool is written in .NET and designed to search for and collect browser local
storage files containing data from the web version of WhatsApp (web.whatsapp.com). For
users of the WhatsApp web app, their browser local storage contains their profile details, chat
data, the phone numbers of users they chat with and current session data. Attackers can gain
access to this data by copying the browser’s local storage files.
Information Last change to this tool card: 23 April 2024
Download this tool card in JSON format
All groups using tool WAExp
Changed Name Country Observed
APT groups
 ToddyCat 2020-2024
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a7f81307-541a-45ce-9a51-5c919bc7d9bb
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=a7f81307-541a-45ce-9a51-5c919bc7d9bb
Page 1 of 1