Ukraine says hackers abuse SyncThing tool to steal data
The Computer Emergency Response Team of Ukraine (CERT-UA) reports about a new campaign dubbed "SickSync," launched by the UAC-0020 (Vermin) hacking group in attacks on the Ukrainian defense forces.
Got worried about a synching vuln, but no, they are just using it as a file transfer agent for their own malware.
Threat actor using software as intended.
Next article, "hackers abuse bash to list directory contents and write the output to a file."