Whitefly is a cyber espionage group that has been active since at least 2017. This group has primarily targeted organizations in Singapore across several industries and focused on stealing large amounts of sensitive information. This group has been linked to an attack against Singapore’s largest public health organization, SingHealth.

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.