Threat-Actors

threat-actors 2026-04-20
The Gentlemen RaaS: SystemBC Proxy Botnet Reveals 1,570 Corporate Victims
A DFIR engagement against The Gentlemen RaaS exposed a SystemBC C2 server proxying over 1,570 likely corporate victims, with affiliates leaning on a 14,700-device FortiGate inventory for initial access.
ransomware gentlemen systembc cobalt-strike fortigate raas socks5 proxy-botnet

The Gentlemen RaaS: SystemBC Proxy Botnet Reveals 1,570 Corporate Victims