> SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation
[DATE: 21/04/2026 18:18]
[LANGUAGE: EN]
Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called SystemBC.
According to new research published by Check Point, the command-and-control (C2 or C&C) server linked to SystemBC has led to the discovery of a botnet of more than 1,570 victims.
"SystemBC establishes SOCKS5 network tunnels within