Multifunctional malware SystemBC is being used by several ransomware groups. Active since 2018, SystemBC is used to infiltrate systems, launching spear phishing campaigns and installing viruses, making it a go-to tool for cyber attackers. It has been discovered in numerous underground markets with consistent annual incidents. Identified by cybersecurity researcher REXor (aka Aaron), several ransomware groups are confirmed to be using SystemBC, earning it the term Swiss Knife proxy malware.
The first UEFI bootkit malware for Linux has been detected, so users beware
ESET researchers have revealed a first-of-its-kind Linux UEFI bootkit, named ‘Bootkitty’, which could pose a significant risk despite being in early stages of development. The