Live
eineurope/
Home/Global/Topic · Ransomware C2 server exposes 1,570+ victims
Global6d ago

Ransomware C2 server exposes 1,570+ victims

A compromised command server for the SystemBC malware has exposed over 1,570 victim endpoints linked to The Gentlemen ransomware operation.

Sources
1 verified
Location
Updated
Wednesday, 22 April 2026 at 12:13 UTC
No media · text-only dispatch
Synthesis · 1 sources
A compromised command-and-control server for the SystemBC malware has exposed data on more than 1,570 victim endpoints linked to The Gentlemen ransomware operation. SystemBC is a SOCKS5 proxy tool used by threat actors to establish covert communication channels and facilitate lateral movement within compromised networks while masking malicious traffic. The exposure provides rare visibility into the operational scale of an active ransomware campaign, highlighting the continued reliance on proxy-based tools for persistence and evasion.
e/eineurope · topic · T-04400