SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation

The report describes The Gentlemen ransomware-as-a-service and an affiliate deployment of SystemBC that led to discovery of a botnet of over 1,570 compromised corporate networks; it details operator tradecraft (GPO abuse, PowerShell-based disabling of Defender, SMB1 re-enablement, credential and internet-facing service abuse), cross-platform encryptors (Windows, ESXi, NAS, BSD), and broader ransomware ecosystem trends including Kyber and Akira and rapid, business-like criminal operations.