Threat actor · all actors
The White CompanyG0089 unknown
aka The White Company
Last updated: 2026-08-20
0attributed CVEs
12ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[The White Company](https://attack.mitre.org/groups/G0089) is a likely state-sponsored threat actor with advanced capabilities. From 2017 through 2018, the group led an espionage campaign called Operation Shaheen targeting government and military organizations in Pakistan.(Citation: Cylance Shaheen Nov 2018)
Source: MITRE ATT&CK
Names & naming systems
Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.
MITRE ATT&CKG-number catalogue id
G0089
Unclassifiedno scheme matched
The White Company
How we know this
- Data origin
- MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
- Techniques
- MITRE ATT&CK STIX mappings — 12 ATT&CK techniques on file.
- Named victims
- None on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
T1027Obfuscated Files or Information ↗T1027.002Software Packing ↗T1070Indicator Removal ↗T1070.004File Deletion ↗T1124System Time Discovery ↗T1203Exploitation for Client Execution ↗T1204User Execution ↗T1204.002Malicious File ↗T1518Software Discovery ↗T1518.001Security Software Discovery ↗T1566Phishing ↗T1566.001Spearphishing Attachment ↗
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-3 | 8 / 12 | 67% |
SI-4 | 8 / 12 | 67% |
CA-7 | 6 / 12 | 50% |
CM-2 | 6 / 12 | 50% |
CM-6 | 6 / 12 | 50% |
SI-2 | 6 / 12 | 50% |
SI-7 | 6 / 12 | 50% |
AC-4 | 5 / 12 | 42% |
SC-44 | 5 / 12 | 42% |
SC-7 | 5 / 12 | 42% |
SI-8 | 4 / 12 | 33% |
CM-7 | 3 / 12 | 25% |
AC-3 | 2 / 12 | 17% |
AC-6 | 2 / 12 | 17% |
IA-9 | 2 / 12 | 17% |
Co-occurring actors
None.