Product
Restic
- First Reported
- Mar 13, 2024
- Latest Reported
- Mar 12, 2026
Reported Context (3)
- We have, however, observed data exfiltration via the native Windows utility finger.exe, as well as via backup utilities such as restic, BackBlaze, and s5cmd. Huntress Details Restic Data Staging and INC Ransomware Activity
- Other observed methods of data exfiltration include the use of RClone for syncing files to the cloud, or backup utilities such as Restic and BackBlaze. Huntress Details Data Exfiltration Tactics Used in Ransomware Incidents
- an article outlining data exfiltration tools used by ransomware threat actors, one of which was the restic backup application. A Huntress Security Operations Center (SOC) analyst investigated and reported alerts Huntress Details Attempted Data Exfiltration Using Restic Backup Utility
Malware (3)
People (3)
Threat Actors (1)
MITRE ATT&CK (16)
Products (9)
Tools (7)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.