G0089 · 8 ATT&CK techniques · 0 correlated reports

The White Company

Aliases: None listed

The White Company is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.

Open interactive actor investigation

ATT&CK techniques

T1027.002
Software PackingT1518.001
Security Software DiscoveryT1203
Exploitation for Client ExecutionT1070.004
File DeletionT1566.001
Spearphishing AttachmentT1204.002
Malicious FileT1124
System Time DiscoveryT1497
Virtualization/Sandbox Evasion

Correlated CTI and IR reports

Continue the investigation

Interactive ThreatMapper ThreatMapper documentation CTI Analyst Field Manual Israel Threat Actors CTI Anomaly Detection Atlas ITDR Handbook 1200km Medium research