Open-source SFTP/SCP client abused for staged data exfiltration.
Read the full analysis on IntelFusions