{
  "id": "whitefly",
  "name": "Whitefly",
  "aliases": [],
  "domain": "cyber",
  "country": "UNK",
  "category": "Unattributed cyber threat group",
  "status": "tracked",
  "fielded": null,
  "operators": [],
  "summary": "Whitefly is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Not attributed by ATT&CK",
      "src": [
        "mitre-g0107"
      ],
      "conf": "low"
    },
    {
      "k": "active_since",
      "v": 2017,
      "src": [
        "mitre-g0107"
      ],
      "conf": "medium",
      "note": "At least 2017"
    },
    {
      "k": "attack_id",
      "v": "G0107",
      "src": [
        "mitre-g0107"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information.",
      "src": [
        "mitre-g0107"
      ],
      "conf": "medium"
    },
    {
      "k": "techniques_count",
      "v": 9,
      "src": [
        "mitre-g0107"
      ],
      "conf": "high",
      "note": "ATT&CK v20.1"
    },
    {
      "k": "software",
      "v": "Mimikatz",
      "src": [
        "mitre-g0107"
      ],
      "conf": "high",
      "note": "1 malware and tool entries linked in ATT&CK"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "notes": "Whitefly is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.",
  "changelog": [
    {
      "date": "2026-11-08",
      "change": "Entry created from MITRE ATT&CK Enterprise v20.1 (group G0107)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/whitefly.html",
  "sources": {
    "mitre-g0107": {
      "title": "Whitefly, Group G0107",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0107/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-11-08"
    }
  }
}