SystemBC

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: elf.systembc

Threat Analysis

SystemBC is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning SystemBC

SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation

The Hacker News· Apr 21, 2026

The Gentlemen Ransomware Expands With Rapid Affiliate Growth

Infosecurity Magazine· Apr 21, 2026

The Gentlemen ransomware now uses SystemBC for bot-powered attacks

BleepingComputer· Apr 20, 2026

DFIR Report – The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy

Check Point Research· Apr 20, 2026

External References

→https://arcticwolf.com/resources/blog/greedy-sponge-targets-mexico-with-allakore-rat-and-systembc/

→https://asec.ahnlab.com/en/33600/

→https://blog.lumen.com/systembc-bringing-the-noise/

→https://blog.morphisec.com/unveiling-uac-0184-the-remcos-rat-steganography-saga

→https://blog.reversinglabs.com/blog/code-reuse-across-packers-and-dll-loaders

Quick Facts

TypeAPT / Threat Group

Aliases5

Also Known As

elf.systembcCoroxySystemBCDroxiDatwin.systembc

External Intelligence

Malpedia: win.systembc

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search SystemBC