New malware sets up proxies on your PC to relay malicious traffic

[Brink]

A new malware strain targeting Windows systems is rearing its ugly head. Named SystemBC, this malware installs a proxy on infected computers.The bad news is that SystemBC never comes alone, and usually, the presence of this malware indicates that a computer was also infected by a second threat.

Proofpoint researchers, who recently analyzed the malware, say its creators are advertising it on underground cybercrime forums to other malware authors.

The SystemBC malware is effectively an on-demand proxy component that other malware operators can integrate and deploy on compromised computers alongside their primary strain.

SystemBC's main role is to create a SOCKS5 proxy server through which the other malware can create a tunnel to bypass local firewalls, skirt internet content filters, or connect to its command-and-control server without revealing its real IP address...

Read more:

• New Windows malware sets up proxies on your PC to relay malicious traffic | ZDNet
• SystemBC is like Christmas in July for SOCKS5 Malware and Exploit Kits | Proofpoint

 

[file3456]

"without revealing its real IP address..."

Not even monitoring SNMP? I doubt that.

And Pfsense probably can block it.