SystemBC

Threat actors linked to The Gentlemen ransomware-as-a-service (RaaS) operation are deploying SystemBC proxy malware, with a Check Point analysis revealing over 1,570 victims via a compromised C2 server. The discovery highlights a botnet tied to the ransomware campaign.

The Gentlemen ransomware group is now utilizing the SystemBC proxy malware botnet, which includes over 1,570 corporate hosts, following an investigation into a recent ransomware attack by an affiliate of the gang.