New SystemBC Malware Variant Targets Southern African Power Company

New SystemBC Malware Variant Targets Southern African Power Company. Unknown threat actor linked to southern African power company cyber attack. DroxiDat malware variant used as a precursor to ransomware attack. SystemBC deploy Cobalt Strike Beacons in critical infrastructure. SystemBC uses SOCKS5 proxies and can download additional payloads. SystemBC used as conduit for ransomware attacks. DroxiDat employed in healthcare incident to deliver Nokoyawa ransomware. Malware stripped off most functionality to act as system profiler. Identity of threat actors unknown but evidence points to Russian ransomware groups