aol.pm

ftp

Software · ATTACK:enterprise:S0095

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance
{
  "id": "ATTACK:enterprise:S0095",
  "title": "ftp",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S0095",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "tool--cf23bf4a-e003-4116-bbae-1ea6c558d565",
  "external_id": "S0095",
  "domain": "enterprise",
  "created": "2017-05-31T21:33:00.565Z",
  "modified": "2025-06-04T16:11:23.752Z",
  "version": "2.2",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Microsoft FTP",
      "url": "https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/ftp"
    },
    {
      "source_name": "Linux FTP",
      "url": "https://linux.die.net/man/1/ftp"
    }
  ]
}

Explicit source assertions (10)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:enterprise:G0019 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0ead6cee-20a4-46fb-a9c1-8686a776f455

Baumgartner Naikon 2015

ATTACK:enterprise:S0095 → uses → ATTACK:enterprise:T1570

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--349bc11d-b377-410b-9232-2c5f0fbde031

Microsoft FTP · Linux FTP

ATTACK:enterprise:C0055 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--503f1b0f-16d5-416b-b628-f93d9a0e1a4c

Microsoft Storm-0940

ATTACK:enterprise:S0095 → uses → ATTACK:enterprise:T1048.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ac3ee298-bef0-4a52-9050-3dcef1701408

Microsoft FTP · Linux FTP

ATTACK:enterprise:S0095 → uses → ATTACK:enterprise:T1105

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bb4592cf-4e26-4999-bb6d-5120e0695bfa

Microsoft FTP · Linux FTP

ATTACK:enterprise:G0087 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d741a245-42ea-4bd4-bfb5-5687981e46b3

FBI FLASH APT39 September 2020

ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e21b903a-6bb3-4250-a32a-fe882ff31f3c

CISA Iran Albanian Attacks September 2022

ATTACK:enterprise:G0096 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fc86f198-f9d7-4b95-b26a-9cb9b922f2f1

FireEye APT41 March 2020

ATTACK:enterprise:G0064 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fca4685f-76c5-4089-b318-8f2ebab802d0

Symantec Elfin Mar 2019

ATTACK:enterprise:G0049 → uses → ATTACK:enterprise:S0095

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fd518b7a-b35d-4689-89f6-525efbeee18f

Palo Alto OilRig Oct 2016

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.