#SystemBC
Qilin is Q3's most active ransomware gang - and it kills EDR drivers before it encrypts. https://intel.threadlinqs.com/threat/TL-2026-5787?utm_source=bluesky #ThreatIntel #AgendaCrypt #QilinB #SystemBC
November 11, 2026 at 6:42 PM
No exploit needed: stored root creds let ransomware encrypt ESXi and Proxmox hypervisors. https://intel.threadlinqs.com/threat/TL-2026-5405?utm_source=bluesky #ThreatIntel #SystemBC #black #BlackNevas
November 6, 2026 at 10:24 AM
Interlock and ShinyHunters are hammering schools - ClickFix in, cloud exfil out, campuses shut. https://intel.threadlinqs.com/threat/TL-2026-5329?utm_source=bluesky #ThreatIntel #Interlock #SystemBC #NodeSnake
November 5, 2026 at 4:16 PM
DragonForce hits an ERP vendor - its customers may be next in line for supply-chain fallout. https://intel.threadlinqs.com/threat/TL-2026-4963?utm_source=bluesky #ThreatIntel #SystemBC #Cobalt #MimiKatz
November 1, 2026 at 5:27 AM
Capita's EDR alert fired in minutes, yet the infected host stayed live for days before ransomware hit. https://intel.threadlinqs.com/threat/TL-2026-3795 #ThreatIntel #Black #QakBot #SystemBC
October 17, 2026 at 1:56 AM
A cPanel auth bypass ran as a zero-day for two months - now it is mass-pushing .sorry ransomware. https://intel.threadlinqs.com/threat/TL-2026-3721 #ThreatIntel #CVE_2026_41940 #SystemBC #Sorry
October 16, 2026 at 9:53 AM
Qilin suspect extradited to Germany, but its affiliates were already riding a Check Point VPN zero-day. https://intel.threadlinqs.com/threat/TL-2026-3004 #ThreatIntel #CVE_2026_50751 #AgendaCrypt #SystemBC
October 7, 2026 at 2:14 PM
Veradigm disclosed a patient data breach after a third-party vendor API exposure, with stolen records reportedly including names, addresses, SSNs, and contact details. The company says operations were not disrupted while it investigates. #Veradigm
Veradigm Warns Of Patient Data Breach After Ransomware Gang Claims Attack
Veradigm disclosed a data breach after a third-party vendor compromise exposed patient personal data through a customer-service API, though the incident did not disrupt operations. The Gentlemen ransomware group claimed the attack and says it stole millions of patient records, including names, addresses, SSNs, and contact details, while Veradigm continues its investigation and notification efforts. #Veradigm #TheGentlemen #GentleKiller #SystemBC
www.hendryadrian.com
September 9, 2026 at 7:45 PM
Winona County paid a ransom in January. Interlock hit them again in April and leaked the files anyway. https://intel.threadlinqs.com/threat/TL-2026-2229 #ThreatIntel #interlock #NodeSnake #SystemBC
August 30, 2026 at 4:06 AM
Black Basta's CrossC2 loader brings Cobalt Strike Beacons to Linux and macOS servers with no EDR. https://intel.threadlinqs.com/threat/TL-2026-2135 #ThreatIntel #Cobalt #SystemBC #Black
August 25, 2026 at 2:40 AM
Notícia da SecurityWeek

"SystemBC Infects 10,000 Devices After Defying Law Enforcement Takedown" #bolhasec
SystemBC Infects 10,000 Devices After Defying Law Enforcement Takedown
The SystemBC botnet has infected at least 10,000 systems, abusing them to proxy traffic and deploy additional payloads.
www.securityweek.com
February 8, 2026 at 4:30 PM
Notícia da BleepingComputer

"SystemBC malware turns infected VPS systems into proxy highway" #bolhasec
SystemBC malware turns infected VPS systems into proxy highway
The operators of the SystemBC proxy botnet are hunting for vulnerable commercial virtual private servers (VPS) and maintain an average of 1,500 bots every day that provide a highway for malicious traf...
www.bleepingcomputer.com
October 4, 2025 at 6:30 PM
SystemBC Powers REM Proxy With 1,500 Each Day VPS Victims Throughout 80 C2 Servers

A proxy community often known as REM Proxy is powered by malware often known as SystemBC, providing about 80% of the botnet to its customers, in response to new findings from the Black Lotus Labs group at Lumen…
SystemBC Powers REM Proxy With 1,500 Each Day VPS Victims Throughout 80 C2 Servers
A proxy community often known as REM Proxy is powered by malware often known as SystemBC, providing about 80% of the botnet to its customers, in response to new findings from the Black Lotus Labs group at Lumen Applied sciences. “REM Proxy is a sizeable community, which additionally markets a pool of 20,000 Mikrotik routers and quite a lot of open proxies it finds freely out there on-line,” the corporate stated in a report shared with The Hacker Information. “This service has been a favourite for a number of actors resembling these behind TransferLoader, which has ties to the Morpheus ransomware group.”
nextbusiness24.com
September 20, 2025 at 6:25 PM
SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers

Sep 19, 2025Ravie LakshmananBotnet / Network Security A proxy network known as REM Proxy is powered by malware known as SystemBC, offering about 80% of the botnet to its users, according to new findings from the Black…
SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers
Sep 19, 2025Ravie LakshmananBotnet / Network Security A proxy network known as REM Proxy is powered by malware known as SystemBC, offering about 80% of the botnet to its users, according to new findings from the Black Lotus Labs team at Lumen Technologies. "REM Proxy is a sizeable network, which also markets a pool of 20,000 Mikrotik routers and a variety of open proxies it finds freely available online," the company said in a report shared with The Hacker News.
nexttech-news.com
September 20, 2025 at 6:07 PM
📰 Ransomware Gentlemen Kini Gunakan SystemBC untuk Serangan Berbasis Botnet

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/04/21/ransomware-gentlemen-kini-gunakan-systembc-untuk-serangan-berbasis-botnet/

#ber
it#beritaTeknologie#botnetk#checkPointl#cobaltStrike #esxia#keamananSibera href="/hashtag/per" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link">#per
April 21, 2026 at 4:43 AM
📰 Malware SystemBC Ubah VPS Terinfeksi Menjadi Jalur Proxy Kriminal

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2025/09/19/malware-systembc-serang-vps-jadi-proxy/
September 19, 2025 at 3:15 AM
SystemBC C2服务器揭露:The Gentlemen勒索软件攻击1,570+受害者

https://qian.cx/posts/27D1582E-FAA5-4795-B46C-5DA5E773A783
July 29, 2026 at 12:29 AM
SystemBC恶意软件感染1万台设备:如何应对持续威胁的网络安全挑战

https://qian.cx/posts/91B10385-D049-457C-8E30-3B8B3F7DB894
July 24, 2026 at 6:17 AM
SystemBC is still active: 10,000+ infected IPs, government-linked hosting impacted, and a new Linux Perl variant with zero AV detections.

What’s your take?
#CyberSecurity #Malware #ThreatIntelligence #SystemBC
February 4, 2026 at 4:22 PM
SystemBC C2 server exposes 1,570+ victims linked to The Gentlemen ransomware.

Proxy malware enables stealthy access, payload delivery & encrypted comms across corporate networks.

A major insight into modern RaaS operations.

sctocs.com/systembc-c2-...
SystemBC C2 Infrastructure Exposes Over 1,570 Victims Linked To The Gentlemen Ransomware Operation - SCtoCS
SystemBC C2 server reveals over 1,570 victims tied to The Gentlemen ransomware operation, highlighting the scale of ongoing cyber extortion campaigns.
sctocs.com
April 22, 2026 at 8:07 PM