SystemBC malware turns infected VPS systems into proxy highway
Every day, the operators of the SystemBC proxy botnet maintain an average of 1,500 bots that act as a highway for malicious traffic while searching for commercial virtual private servers (VPS) that are susceptible to attacks.
Around the world, compromised servers have at least one severe vulnerability that has not been patched, and some of them are beset by dozens of security flaws.
Since at least 2019, SystemBC has been in operation, and numerous ransomware gangs and other threat actors have utilized it to distribute payloads.
It enables attackers to conceal command-and-control (C2) activity and redirect malicious traffic through the compromised host in order to evade detection.
Researchers from Black Lotus Labs at Lumen Technologies claim that the SystemBC proxy network is d...