Whitefly, also tracked as Group G0107, is a cyber espionage group believed to be state-sponsored and likely operating out of China, active since at least 2017. The group's primary motivation is intelligence collection and the exfiltration of large volumes of sensitive information, often for national interests. Whitefly distinguishes itself by its concentrated targeting of organizations primarily located in Singapore, exemplified by its involvement in the significant 2018 SingHealth data breach, where it conducted extended intrusion campaigns with precise targeting decisions to steal sensitive patient records. The group employs a blend of custom malware and legitimate open-source tools to achieve its objectives.