Home / Threat actors / Whitefly
Whitefly G0107
Updated at source on Jul 31, 2026 · View on MITRE ATT&CK
1
associated CVEs
10
Techniques
1
Malware and tools
Whitefly is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
CVE-2016-0051 not published here yet
“Whitefly has used an open-source tool to exploit a known Windows privilege escalation vulnerability (CVE-2016-0051) on unpatched computers.”
Techniques by tactic
Resource Development
T1588.002 Tool Execution
T1059 Command and Scripting InterpreterT1204.002 Malicious FileT1574.001 DLL Privilege Escalation
T1068 Exploitation for Privilege Escalation Stealth
T1027.013 Encrypted/Encoded FileT1036.005 Match Legitimate Resource Name or LocationT1574.001 DLL Credential Access
T1003.001 LSASS Memory Command and Control
T1105 Ingress Tool Transfer Malware and tools
- MimikatzToolS0002
© The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.