Several recent ransomware attacks have used a commodity malware variant called SystemBC as a backdoor, Sophos reports. SystemBC works as a network proxy for concealed communications and as a remote access Trojan, or RAT, that allows threat actors to deploy additional commands and scripts to infected Windows devices and to gather data. Ryuk and Egregor attacks have been linked to one-third of all ransomware attacks over the last 12 months, security firm Intel says. The security firm says Ryuk might be responsible for one third of all Ransomware-related attacks over 12 months.”]
Source: https://www.cuinfosecurity.com/ransomware-operators-using-systembc-malware-as-backdoor-a-15612