ftp — Malware Profile

ftp is a utility commonly available with operating systems to transfer information over the File Transfer Protocol (FTP). Adversaries can use it to transfer other tools onto a system or to exfiltrate data.

MITRE ATT&CK techniques (3)

• T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol
• T1105 Ingress Tool Transfer
• T1570 Lateral Tool Transfer

Attributed threat actors

• OilRig
• APT39
• APT41
• Naikon
• APT33

Read the full analysis on IntelFusions