#CARROTBALL

Malware/Tool

2020-01-23 • The Fractured Statue Campaign: U.S. Government Agency Targeted in Spear-Phishing Attacks

CARROTBALL is an FTP downloader named by Unit 42 and used in the Fractured Statue campaign. Embedded in a malicious Word document, it retrieved a CAB archive and installed the SYSCON remote-access Trojan using two sets of FTP credentials.

Tagged Reports

« Back