D
CyberUnattributed

The White Company

Suspected state-linked cyber threat groupTrackedPending verification
CyberUNK
Identification silhouette. Not drawn to scale between entries.
Fact cardConfidence · Source
System
TypeSuspected state-linked cyber threat group
ProliferationOrigin country only
MITRE ATT&CK IDG0089High[1]
Capabilities
ATT&CK techniques used7ATT&CK v20.1High[1]
Malware and toolsNETWIRE, Revenge RAT2 malware and tool entries linked in ATT&CKHigh[1]
Attribution and activity
Attributed sponsorLikely state-sponsored (sponsor not named)Med[1]
TargetsFrom 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.Med[1]
Notes
The White Company is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.
Summary

The White Company is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.

Draft entry. Values come from the cited public sources and are awaiting editor verification.
CompareJSON
Operators
Sources
  1. The White Company, Group G0089, MITRE ATT&CK
    Published/updated 2026-07-31 · Tier 2 · checked 2026-11-08
Change log
  • 2026-11-08 Entry created from MITRE ATT&CK Enterprise v20.1 (group G0089)