We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Trojan:Win32/SystemBC.SA!sms
Aliases: No associated aliases
Summary
Microsoft Defender Antivirus detects and removes this threat.
SystemBC, also known as Coroxy, is a proxy bot attackers use to download and deploy malicious payloads. It converts an infected device into a SOCKS5 proxy to communicate with command-and-control (C2) servers through TCP using custom protocol.
This tool was first discovered in 2019 and has since evolved to target both Windows and Linux systems. Exploit kits are among the important distribution vectors of this malware.
Microsoft Defender Antivirus automatically removes threats as they are detected. If you have cloud-delivered protection, your device gets the latest defenses against new and unknown threats. If you don't have this feature enabled, update your antimalware definitions and run a full scan to remove this threat.
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
