Skip to content
skopnix
Section B · Adversaries · Dossier
← Adversaries

File · The White Company · Unknown · mitre-attack · refreshed 2026-10-06

The White Company

MITRE G0089 ↗

The White Company — ATT&CK roseTW

attack rose · 7 techniques across 4 tactics

Analyst brief

mitre-attack

The White Company is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.

Kill chain

MITRE ATT&CK Enterprise · tap a technique

7 techniques · 4 of 15 tactics

  1. Initial access

    1 technique

  2. Execution

    2 techniques

  3. Stealth

    2 techniques

  4. Discovery

    2 techniques

select a technique

Arsenal

2 malware
Malware
Malware · 2ATT&CK
Revenge RATS0379 ↗
NETWIRES0198 ↗

as stated by MITRE ATT&CK · “shared by” counts roster dossiers citing the same S-id

Take it with you

keyless · no signup

References

2 sources
  1. 1.attack.mitre.org/groups/G0089
  2. 2.cylance.com/content/dam/cylance-web/en-us/resources/knowledge-cent…

Track The White Company on the wire.

This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.