diff --git a/rsync.js b/rsync.js
index a8a7d73..e9dad90 100644
--- a/rsync.js
+++ b/rsync.js
@@ -1017,7 +1017,7 @@ function escapeShellArg(arg) {
  * @return {String} the escaped version of the filename
  */
 function escapeFileArg(filename) {
-  filename = filename.replace(/(["'`\s\\\(\)\\$])/g,'\\$1');
+  filename = filename.replace(/(["'`\s\\\(\)\\$\&])/g,'\\$1');
   if (!/(\\\\)/.test(filename)) {
     return filename;
   }