Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The SystemBC botnet, composed of over 80 C2s and 1,500 daily victims, primarily targets VPS systems from commercial providers. It creates proxies enabling high volumes of malicious traffic for various criminal threat groups. The network is used by multiple proxy services, including REM Proxy, which offers tiered packages for different cybercriminal needs. SystemBC's infrastructure allows for massive data transfers, with some bots generating over 16 GB of proxy data in 24 hours. The botnet is used for various malicious activities, including brute-forcing WordPress credentials, web-scraping, and supporting ransomware operations. The report highlights the evolving nature of proxy services in the cybercriminal ecosystem and their role in facilitating large-scale attacks.

SystemBC is a sophisticated botnet infrastructure primarily targeting Virtual Private Server (VPS) systems provided by commercial hosting providers. Comprising over 80 command-and-control (C2) servers and impacting approximately 1,500 victims daily, SystemBC operates by creating proxy networks that facilitate high volumes of malicious traffic. These proxies are leveraged by multiple cybercriminal groups and proxy services, such as REM Proxy, which offers tiered packages tailored to different criminal operations. The botnet's architecture supports massive data transfers, with some infected bots generating over 16 GB of proxy traffic within a 24-hour period. This extensive proxy network enables a variety of malicious activities, including brute-force attacks against WordPress credentials, large-scale web scraping, and supporting ransomware campaigns. Notably, SystemBC is linked to several malware families and ransomware groups, including IcedID, TrickBot, AvosLocker, and others, indicating its role as a critical infrastructure component within the cybercrime ecosystem. The evolving nature of SystemBC highlights the increasing sophistication of proxy services used by threat actors to obfuscate their activities, evade detection, and amplify the scale of their attacks. Despite the lack of known exploits targeting specific software vulnerabilities, the botnet’s use of compromised VPS systems and its facilitation of criminal operations pose significant risks to network security and data integrity.

Detailed information about SystemBC – Bringing the Noise. Get real-time updates, technical details, and mitigation strategies.

SystemBC – Bringing the Noise - Live Threat Intelligence - Threat Radar | OffSeq.com

SystemBC – Bringing the Noise

Threats Tagged 'malicious traffic'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'malicious traffic'

Lead Pen Test Professional