Skip to content

S0095 ftp

ftp is a utility commonly available with operating systems to transfer information over the File Transfer Protocol (FTP). Adversaries can use it to transfer other tools onto a system or to exfiltrate data.12

Item Value
ID S0095
Associated Names
Type TOOL
Version 2.0
Created 31 May 2017
Last Modified 07 March 2022
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
enterprise T1048 Exfiltration Over Alternative Protocol -
enterprise T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol ftp may be used to exfiltrate data separate from the main command and control protocol.12
enterprise T1105 Ingress Tool Transfer ftp may be abused by adversaries to transfer tools or files from an external system into a compromised environment.12
enterprise T1570 Lateral Tool Transfer ftp may be abused by adversaries to transfer tools or files between systems within a compromised environment.12

Groups That Use This Software

ID Name References
G0019 Naikon 3
G0049 OilRig 4
G0064 APT33 5
G0087 APT39 6
G0096 APT41 7

References

Back to top