SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation

Tue, 21 Apr 2026 20:18:00 +0200

Threat actors associated with The Gentlemen ransomware‑as‑a‑service (RaaS) operation have been observed attempting to deploy a known proxy malware called SystemBC. According to new research published by Check Point, the command-and-control (C2 or C&C) server linked to SystemBC has led to the discovery of a botnet of more than 1,570 victims. "SystemBC establishes SOCKS5 network tunnels within