ftp is a utility commonly available with operating systems to transfer information over the File Transfer Protocol (FTP). Adversaries can use it to transfer other tools onto a system or to exfiltrate data.
| Technique | Procedure example |
|---|---|
| T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol |
ftp may be used to exfiltrate data separate from the main command and control protocol. |
| T1105 Ingress Tool Transfer |
ftp may be abused by adversaries to transfer tools or files from an external system into a compromised environment. |
| T1570 Lateral Tool Transfer |
ftp may be abused by adversaries to transfer tools or files between systems within a compromised environment. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
