CARROTBALL
- ID
- S0465
- Type
- Tool
- Platforms
- Windows
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
CARROTBALL is an FTP downloader utility that has been in use since at least 2019. CARROTBALL has been used as a downloader to install SYSCON.[1]
Techniques used (4)
- T1027 Obfuscated Files or Information
- T1071.002 File Transfer Protocols
- T1105 Ingress Tool Transfer
- T1204.002 Malicious File