- Category
- Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
- Origin
- Unknown
- Seen
- to 2026
- Status
- Active
- ATT&CK
- G0107 · 9 techniques
- Sources
- 6 sources carry it
- Identifier
- GINC-APT-0368 · whitefly
What it is
Whitefly is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth.
Tools
The tools and malware families the sources tie to it.
- Archelaus Beta
- CVE-2016-0051
- CrossRat
- Mimikatz
- Nibatad
- Termite
- Vcrodat
Sources
- MITRE ATT&CK attack.mitre.org
- Malpedia malpedia.caad.fkie.fraunhofer.de