Malware
CARROTBALL
CARROTBALL is a simple FTP downloader built to deploy SYSCON, a Remote Access Trojan used by the same threat actor.
CARROTBALL is a Windows malware family.
Background
CARROTBALL is a basic FTP downloader designed to install SYSCON, a Remote Access Trojan operated by the same actor. Unit 42 identified it in late 2019, when the downloader was leveraged in spear phishing campaigns aimed at US government agencies.
Source: Malpedia (Fraunhofer FKIE).