H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Group

Whitefly

[Whitefly](https://attack.mitre.org/groups/G0107) is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth.(Citation: Symantec Whitefly March 2019)

Group
TypeGroup
External ID—
First seen2026-08-14
Last seen2026-08-14

Confidence

—

[Whitefly](https://attack.mitre.org/groups/G0107) is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth.(Citation: Symantec Whitefly March 2019)

10 recorded

Relationships

uses
to Command and Scripting Interpreter
Technique
uses
to DLL
Technique
uses
to Encrypted/Encoded File
Technique
uses
to Exploitation for Privilege Escalation
Technique
uses
to Ingress Tool Transfer
Technique
uses
to LSASS Memory
Technique
uses
to Malicious File
Technique
uses
to Match Legitimate Resource Name or Location
Technique
uses
to Mimikatz
Tool
uses
to Tool
Technique
2 external

References

mitre-attack
G0107
open
Symantec Whitefly March 2019
https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/whitefly-espionage-singapore
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance