Intel Node
SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation
high•ransomware•2026-04-21T18:18:00+00:00
ransomwaremalware
Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called SystemBC. According to new research published by Check Point, the command-and-control (C2 or C&C) server linked to SystemBC has led to the discovery of a botnet of more than 1,570 victims. "SystemBC establishes SOCKS5 network tunnels within