FTP is a utility commonly available with operating systems to transfer information over the File Transfer Protocol (FTP). Adversaries can use it to transfer other tools onto a system or to exfiltrate data. [1]

ID: S0095
Associated Software: ftp.exe
Type: TOOL
Platforms: Linux, Windows, macOS
Version: 1.1
Created: 31 May 2017
Last Modified: 30 March 2020

Techniques Used

Domain ID Name Use
Enterprise T1048 .003 Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol

FTP may be used to exfiltrate data separate from the main command and control protocol.[1]

Groups That Use This Software

ID Name References
G0019 Naikon


G0049 OilRig


G0064 APT33


G0096 APT41


G0087 APT39