The Cyber Division of the U.S. Federal Bureau of Investigation (FBI) warns the companies in the healthcare industry of FTP attacks. The attackers aim to steal protected health information (PHI) and personally identifiable information (PII) and use them for criminal purposes. The vulnerable servers can also be abused by crooks to power cyber attacks of to store malicious tools. The FBI recommends medical and dental healthcare entities to check networks for FTP servers running in anonymous mode. According to a study conducted by the University of Michigan titled, FTP: The Forgotten Cloud, over 1 million FTP servers were configured to allow anonymous access.”]
Source: https://securityaffairs.co/wordpress/57476/cyber-crime/ftp-attacks-fbi.html