coldbraid

Whitefly

Whitefly is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth.

ATT&CK ID
G0107
Techniques
9
Tools
1

Vulnerabilities it has exploited

Techniques

Resource Development

Obtain Capabilities

Execution

Command and Scripting InterpreterUser ExecutionHijack Execution Flow

Privilege Escalation

Exploitation for Privilege Escalation

Stealth

Obfuscated Files or InformationMasqueradingHijack Execution Flow

Credential Access

OS Credential Dumping

Command and Control

Ingress Tool Transfer

Software

Mimikatz