coldbraid

The White Company

The White Company is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.

ATT&CK ID
G0089
Techniques
7
Tools
2

Techniques

Initial Access

Phishing

Execution

Exploitation for Client ExecutionUser Execution

Stealth

Obfuscated Files or InformationIndicator Removal

Discovery

System Time DiscoverySoftware Discovery

Software

NETWIRE · Revenge RAT