MITRE ATT&CKgroup
G0107 Whitefly
- Domain
- enterprise
- Version
- 1.2
- Created
- 2020-05-26
Description
Whitefly is a cyber espionage group that has been operating since at least 2017. The group has targeted organizations based mostly in Singapore across a wide variety of sectors, and is primarily interested in stealing large amounts of sensitive information. The group has been linked to an attack against Singapore’s largest public health organization, SingHealth.
Related
Uses · MITRE ATT&CK (10)
- T1027.013 Encrypted/Encoded File sub-technique
- T1588.002 Tool sub-technique
- T1574.001 DLL sub-technique
- T1204.002 Malicious File sub-technique
- T1003.001 LSASS Memory sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- S0002 Mimikatz software (tool)
- T1059 Command and Scripting Interpreter technique
- T1068 Exploitation for Privilege Escalation technique
- T1105 Ingress Tool Transfer technique
References
- https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/whitefly-espionage-singapore Symantec Whitefly March 2019