153
Ukraine says hackers abuse SyncThing tool to steal data
(www.bleepingcomputer.com)
This is a most excellent place for technology news and articles.
Looks like a specially modified SyncThing was just used for exfil.
The article uses the word modified, but it sounds like it's just talking about configuring it and using it as normal.