{
  "name": "SystemBC \u2013 Bringing the Noise",
  "slug": "systembc-bringing-the-noise",
  "description": "The SystemBC botnet, composed of over 80 C2s and 1,500 daily victims, primarily targets VPS systems from commercial providers. It creates proxies enabling high volumes of malicious traffic for various criminal threat groups. The network is used by multiple proxy services, including REM Proxy, which offers tiered packages for different cybercriminal needs. SystemBC's infrastructure allows for massive data transfers, with some bots generating over 16 GB of proxy data in 24 hours. The botnet is used for various malicious activities, including brute-forcing WordPress credentials, web-scraping, and supporting ransomware operations. The report highlights the evolving nature of proxy services in the cybercriminal ecosystem and their role in facilitating large-scale attacks.",
  "published": "2025-09-25T07:21:10+00:00",
  "created_at": "2025-09-25T07:21:10+00:00",
  "modified_at": "2025-09-25T12:41:31+00:00",
  "created_at_opencti": "2025-09-25T07:21:10+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2025-09-25",
    "avoslocker",
    "botnet",
    "cybercrime",
    "icedid",
    "infrastructure",
    "malicious traffic",
    "morpheus",
    "ngioweb",
    "proxy",
    "ransomware",
    "rem proxy",
    "systembc",
    "transferloader",
    "trickbot",
    "vps"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "85.206.167.149"
      },
      {
        "id": "",
        "name": "85.206.167.148"
      },
      {
        "id": "",
        "name": "85.206.167.147"
      },
      {
        "id": "",
        "name": "85.206.167.146"
      },
      {
        "id": "",
        "name": "85.206.167.145"
      },
      {
        "id": "",
        "name": "85.206.167.144"
      },
      {
        "id": "",
        "name": "85.206.167.143"
      },
      {
        "id": "",
        "name": "85.206.167.142"
      },
      {
        "id": "",
        "name": "85.206.167.141"
      },
      {
        "id": "",
        "name": "85.206.167.140"
      },
      {
        "id": "",
        "name": "85.206.167.139"
      },
      {
        "id": "",
        "name": "85.206.167.138"
      },
      {
        "id": "",
        "name": "85.206.167.137"
      },
      {
        "id": "",
        "name": "85.206.167.136"
      },
      {
        "id": "",
        "name": "85.206.167.135"
      },
      {
        "id": "",
        "name": "85.206.167.134"
      },
      {
        "id": "",
        "name": "85.206.167.133"
      },
      {
        "id": "",
        "name": "85.206.167.132"
      },
      {
        "id": "",
        "name": "85.206.160.66"
      },
      {
        "id": "",
        "name": "85.206.160.65"
      },
      {
        "id": "",
        "name": "85.206.160.250"
      },
      {
        "id": "",
        "name": "85.206.160.226"
      },
      {
        "id": "",
        "name": "85.206.160.225"
      },
      {
        "id": "",
        "name": "85.206.160.13"
      },
      {
        "id": "",
        "name": "85.206.160.116"
      },
      {
        "id": "",
        "name": "85.206.160.115"
      },
      {
        "id": "",
        "name": "185.93.89.191"
      },
      {
        "id": "",
        "name": "185.93.89.190"
      },
      {
        "id": "",
        "name": "185.93.89.189"
      },
      {
        "id": "",
        "name": "185.93.89.188"
      },
      {
        "id": "",
        "name": "185.93.89.187"
      },
      {
        "id": "",
        "name": "185.93.89.183"
      },
      {
        "id": "",
        "name": "185.93.89.182"
      },
      {
        "id": "",
        "name": "185.93.89.181"
      },
      {
        "id": "",
        "name": "185.93.89.180"
      },
      {
        "id": "",
        "name": "185.93.89.179"
      },
      {
        "id": "",
        "name": "185.93.89.178"
      },
      {
        "id": "",
        "name": "185.93.89.177"
      },
      {
        "id": "",
        "name": "185.93.89.176"
      },
      {
        "id": "",
        "name": "185.93.89.175"
      },
      {
        "id": "",
        "name": "185.93.89.174"
      },
      {
        "id": "",
        "name": "185.93.89.172"
      },
      {
        "id": "",
        "name": "185.93.89.171"
      },
      {
        "id": "",
        "name": "185.93.89.170"
      },
      {
        "id": "",
        "name": "185.93.89.169"
      },
      {
        "id": "",
        "name": "185.93.89.168"
      },
      {
        "id": "",
        "name": "185.93.89.166"
      },
      {
        "id": "",
        "name": "185.93.89.165"
      },
      {
        "id": "",
        "name": "185.93.89.164"
      },
      {
        "id": "",
        "name": "185.93.89.163"
      },
      {
        "id": "",
        "name": "185.93.89.162"
      },
      {
        "id": "",
        "name": "185.93.89.159"
      },
      {
        "id": "",
        "name": "185.93.89.158"
      },
      {
        "id": "",
        "name": "185.93.89.157"
      },
      {
        "id": "",
        "name": "185.93.89.156"
      },
      {
        "id": "",
        "name": "185.93.89.155"
      },
      {
        "id": "",
        "name": "185.93.89.153"
      },
      {
        "id": "",
        "name": "185.93.89.152"
      },
      {
        "id": "",
        "name": "185.93.89.151"
      },
      {
        "id": "",
        "name": "185.93.89.150"
      },
      {
        "id": "",
        "name": "185.93.89.149"
      },
      {
        "id": "",
        "name": "185.93.89.147"
      },
      {
        "id": "",
        "name": "185.93.89.146"
      },
      {
        "id": "",
        "name": "185.93.89.145"
      },
      {
        "id": "",
        "name": "185.93.89.144"
      },
      {
        "id": "",
        "name": "185.93.89.143"
      },
      {
        "id": "",
        "name": "185.64.106.97"
      },
      {
        "id": "",
        "name": "185.64.106.94"
      },
      {
        "id": "",
        "name": "185.64.106.189"
      },
      {
        "id": "",
        "name": "185.64.106.186"
      },
      {
        "id": "",
        "name": "185.64.106.148"
      },
      {
        "id": "",
        "name": "185.64.106.147"
      },
      {
        "id": "",
        "name": "185.64.105.8"
      },
      {
        "id": "",
        "name": "185.64.105.183"
      },
      {
        "id": "",
        "name": "185.64.105.182"
      },
      {
        "id": "",
        "name": "185.64.105.12"
      },
      {
        "id": "",
        "name": "185.64.104.69"
      },
      {
        "id": "",
        "name": "185.64.104.68"
      },
      {
        "id": "",
        "name": "185.64.104.55"
      },
      {
        "id": "",
        "name": "185.64.104.54"
      },
      {
        "id": "",
        "name": "185.64.104.45"
      },
      {
        "id": "",
        "name": "185.64.104.44"
      },
      {
        "id": "",
        "name": "185.64.104.132"
      },
      {
        "id": "",
        "name": "185.64.104.131"
      },
      {
        "id": "",
        "name": "185.64.104.125"
      },
      {
        "id": "",
        "name": "185.64.104.124"
      },
      {
        "id": "",
        "name": "185.25.49.229"
      },
      {
        "id": "",
        "name": "185.25.49.221"
      },
      {
        "id": "",
        "name": "185.25.49.220"
      },
      {
        "id": "",
        "name": "185.25.49.183"
      },
      {
        "id": "",
        "name": "185.25.49.182"
      },
      {
        "id": "",
        "name": "185.25.49.181"
      },
      {
        "id": "",
        "name": "185.25.49.180"
      },
      {
        "id": "",
        "name": "185.25.48.97"
      },
      {
        "id": "",
        "name": "185.25.48.96"
      },
      {
        "id": "",
        "name": "185.25.48.95"
      },
      {
        "id": "",
        "name": "185.25.48.49"
      },
      {
        "id": "",
        "name": "185.25.48.197"
      },
      {
        "id": "",
        "name": "185.25.48.104"
      },
      {
        "id": "",
        "name": "185.25.48.102"
      },
      {
        "id": "",
        "name": "176.46.138.241"
      },
      {
        "id": "",
        "name": "176.46.138.240"
      },
      {
        "id": "",
        "name": "176.46.138.239"
      },
      {
        "id": "",
        "name": "176.46.138.237"
      },
      {
        "id": "",
        "name": "176.46.138.235"
      },
      {
        "id": "",
        "name": "176.46.138.234"
      },
      {
        "id": "",
        "name": "176.46.138.233"
      },
      {
        "id": "",
        "name": "176.46.138.232"
      },
      {
        "id": "",
        "name": "176.46.138.229"
      },
      {
        "id": "",
        "name": "176.46.138.228"
      },
      {
        "id": "",
        "name": "176.46.138.227"
      },
      {
        "id": "",
        "name": "176.46.138.226"
      },
      {
        "id": "",
        "name": "176.46.138.225"
      },
      {
        "id": "",
        "name": "176.46.138.223"
      },
      {
        "id": "",
        "name": "176.46.138.222"
      },
      {
        "id": "",
        "name": "176.46.138.221"
      },
      {
        "id": "",
        "name": "176.46.138.220"
      },
      {
        "id": "",
        "name": "176.46.138.219"
      },
      {
        "id": "",
        "name": "176.46.138.217"
      },
      {
        "id": "",
        "name": "176.46.138.216"
      },
      {
        "id": "",
        "name": "176.46.138.215"
      },
      {
        "id": "",
        "name": "176.46.138.213"
      },
      {
        "id": "",
        "name": "176.46.138.211"
      },
      {
        "id": "",
        "name": "176.46.138.210"
      },
      {
        "id": "",
        "name": "176.46.138.209"
      },
      {
        "id": "",
        "name": "176.46.138.208"
      },
      {
        "id": "",
        "name": "176.46.138.207"
      },
      {
        "id": "",
        "name": "104.250.164.254"
      },
      {
        "id": "",
        "name": "104.250.164.253"
      },
      {
        "id": "",
        "name": "104.250.164.252"
      },
      {
        "id": "",
        "name": "104.250.164.250"
      },
      {
        "id": "",
        "name": "104.250.164.251"
      },
      {
        "id": "",
        "name": "104.250.164.248"
      },
      {
        "id": "",
        "name": "104.250.164.247"
      },
      {
        "id": "",
        "name": "104.250.164.246"
      },
      {
        "id": "",
        "name": "104.250.164.242"
      },
      {
        "id": "",
        "name": "104.250.164.245"
      },
      {
        "id": "",
        "name": "104.250.164.244"
      },
      {
        "id": "",
        "name": "104.250.164.241"
      },
      {
        "id": "",
        "name": "104.250.164.239"
      },
      {
        "id": "",
        "name": "104.250.164.240"
      },
      {
        "id": "",
        "name": "104.250.164.238"
      },
      {
        "id": "",
        "name": "104.250.164.235"
      },
      {
        "id": "",
        "name": "104.250.164.236"
      },
      {
        "id": "",
        "name": "104.250.164.234"
      },
      {
        "id": "",
        "name": "104.250.164.233"
      },
      {
        "id": "",
        "name": "104.250.164.230"
      },
      {
        "id": "",
        "name": "104.250.164.228"
      },
      {
        "id": "",
        "name": "104.250.164.227"
      },
      {
        "id": "",
        "name": "104.250.164.229"
      },
      {
        "id": "",
        "name": "104.250.164.226"
      },
      {
        "id": "",
        "name": "104.250.164.223"
      },
      {
        "id": "",
        "name": "104.250.164.224"
      },
      {
        "id": "",
        "name": "104.250.164.222"
      },
      {
        "id": "",
        "name": "104.250.164.221"
      },
      {
        "id": "",
        "name": "104.250.164.220"
      },
      {
        "id": "",
        "name": "104.250.164.214"
      },
      {
        "id": "",
        "name": "1c74b1195250632f2f1d1a9066f07f6e0a8c12dff40aeb3c1fe22440c97bc8ee"
      }
    ],
    "malware": [
      {
        "id": "legacy:malware:4590090bf5d688e4",
        "name": "AvosLocker - S1053",
        "slug": "avoslocker-s1053"
      },
      {
        "id": "legacy:malware:3379f8ca04695a1a",
        "name": "TransferLoader",
        "slug": "transferloader"
      },
      {
        "id": "legacy:malware:aa26d7c557296a4e",
        "name": "Morpheus",
        "slug": "morpheus"
      },
      {
        "id": "legacy:malware:fdd36483dcfb1131",
        "name": "TSPY_TRICKLOAD",
        "slug": "tspy_trickload"
      },
      {
        "id": "legacy:malware:d001f5e527da7851",
        "name": "Ngioweb",
        "slug": "ngioweb"
      },
      {
        "id": "legacy:malware:ae6ad40a7dab1a1c",
        "name": "Totbrick",
        "slug": "totbrick"
      },
      {
        "id": "legacy:malware:5afd3cb672567b24",
        "name": "TrickBot - S0266",
        "slug": "trickbot-s0266"
      },
      {
        "id": "legacy:malware:d2ce80cf3263d659",
        "name": "SystemBC",
        "slug": "systembc"
      },
      {
        "id": "legacy:malware:5b97ff7cc1ffdf29",
        "name": "IcedID - S0483",
        "slug": "icedid-s0483"
      }
    ],
    "attack_patterns": [
      {
        "id": "444de5e0-bd7f-4700-b700-26320057dd80",
        "name": "T1110"
      },
      {
        "id": "232fbdfa-94c6-443d-b575-373e75b4f4c2",
        "name": "T1567"
      },
      {
        "id": "16e26db7-7376-40c1-b8a9-23d56c44f7ee",
        "name": "T1571"
      },
      {
        "id": "a72ebeae-8e62-4039-8135-e9c611011fdc",
        "name": "T1573"
      },
      {
        "id": "870bd958-53a3-4d25-9f23-00aa8bd6674d",
        "name": "T1102"
      },
      {
        "id": "a831f7c4-a7f0-4243-8211-1cd44fa34fa7",
        "name": "T1020"
      },
      {
        "id": "53c193a7-f726-4bd2-ae88-4019e2604adf",
        "name": "T1046"
      },
      {
        "id": "81ee4813-4f68-4984-bec1-980d7c5b56eb",
        "name": "T1132"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      },
      {
        "id": "6c8f8a40-2746-4a37-86bd-81e82afa6e62",
        "name": "T1190"
      },
      {
        "id": "b9eab970-53dd-4977-9a26-c4fe566e422d",
        "name": "T1133"
      },
      {
        "id": "ca53b2fa-42a8-45ec-9682-0cf54bf280f3",
        "name": "T1090"
      },
      {
        "id": "9f11a241-9abc-4c57-95dd-33955ab08826",
        "name": "T1078"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Russian Federation"
      }
    ]
  },
  "external_refs": [
    "https://blog.lumen.com/systembc-bringing-the-noise",
    "https://otx.alienvault.com/pulse/68d509863799dc888a979a98"
  ]
}