{"id":235581,"date":"2026-04-20T22:23:55","date_gmt":"2026-04-21T03:23:55","guid":{"rendered":"https:\/\/lifeboat.com\/blog\/2026\/04\/the-gentlemen-ransomware-now-uses-systembc-for-bot-powered-attacks"},"modified":"2026-04-20T22:23:55","modified_gmt":"2026-04-21T03:23:55","slug":"the-gentlemen-ransomware-now-uses-systembc-for-bot-powered-attacks","status":"publish","type":"post","link":"https:\/\/lifeboat.com\/blog\/2026\/04\/the-gentlemen-ransomware-now-uses-systembc-for-bot-powered-attacks","title":{"rendered":"The Gentlemen ransomware now uses SystemBC for bot-powered attacks"},"content":{"rendered":"<p><a class=\"aligncenter blog-photo\" href=\"https:\/\/lifeboat.com\/blog.images\/the-gentlemen-ransomware-now-uses-systembc-for-bot-powered-attacks.jpg\"><\/a><\/p>\n<p>A SystemBC proxy malware botnet of more than 1,570 hosts, believed to be corporate victims, has been discovered following an investigation into a Gentlemen ransomware attack carried out by a gang affiliate.<\/p>\n<p>The Gentlemen ransomware-as-a-service (RaaS) operation emerged around mid-2025 and provides a Go-based locker that can encrypt Windows, Linux, NAS, and BSD systems, and a C-based locker for ESXi hypervisors.<\/p>\n<p>Last December, it compromised one of <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/romanian-energy-provider-hit-by-gentlemen-ransomware-attack\/\" rel=\"nofollow noopener\">Romania\u2019s largest energy providers<\/a>, the Oltenia Energy Complex. Earlier this month, <a href=\"https:\/\/www.theadaptavistgroup.com\/letters\/april-2026\" rel=\"nofollow noopener\">The Adaptavist Group disclosed a breach<\/a> that Gentlemen ransomware listed on its data leak site.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A SystemBC proxy malware botnet of more than 1,570 hosts, believed to be corporate victims, has been discovered following an investigation into a Gentlemen ransomware attack carried out by a gang affiliate. The Gentlemen ransomware-as-a-service (RaaS) operation emerged around mid-2025 and provides a Go-based locker that can encrypt Windows, Linux, NAS, and BSD systems, and [\u2026]<\/p>\n","protected":false},"author":427,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,1625,6],"tags":[],"class_list":["post-235581","post","type-post","status-publish","format-standard","hentry","category-cybercrime-malcode","category-encryption","category-robotics-ai"],"_links":{"self":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/235581","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/users\/427"}],"replies":[{"embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/comments?post=235581"}],"version-history":[{"count":0,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/posts\/235581\/revisions"}],"wp:attachment":[{"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/media?parent=235581"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/categories?post=235581"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lifeboat.com\/blog\/wp-json\/wp\/v2\/tags?post=235581"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}