TeamPCP

Sep 19 – September 21, 2026 · 2 reports

• Google had an undercover Mandiant analyst inside TeamPCP's inner circle, disclosed by GTIG researcher Austin Larsen at LABScon. The persona had spent months building trust with an actor who was later invited into the group, meaning "almost day one, Mandiant was watching everything behind the scenes" — letting Google warn victims and disrupt exploitation during a campaign that tainted hundreds of open-source packages, used a Dune-themed self-spreading worm, and breached more than a thousand companies (Ars Technica, earlier coverage). Two Australians in their early 20s were arrested last month and described by the AFP as principal participants. Larsen also says internal chat visibility showed someone in the core circle using an AI tool to develop a zero-day against a widely used login product, aimed at bypassing its 2FA. Google additionally received intelligence from ShinyHunters, which had partnered with TeamPCP before turning on it. · Sep 21 · observed · via package registry · Threat Activity
• Google says an undercover Mandiant analyst infiltrated the group "TeamPCP" during a large supply-chain hacking spree (@DarkWebInformer). · Sep 19 · observed · as team pcp · Threat Activity

September 9, 2026

• A financially motivated group ran a large-scale credential-harvesting campaign end to end in under six hours using an autonomous multi-agent framework, according to Google Threat Intelligence Group. GTIG also reports actors in healthcare, government and media stealing proprietary-model API credentials and co-opting victim cloud environments to run their own AI workloads. It attributes a run of PyPI, npm and Docker Hub supply-chain compromises to TeamPCP (aka Altered Spider, UNC6780), which deploys the SANDCLOCK stealer — a Python, Linux- and Kubernetes-aware component of what has been publicly called CanisterWorm, with container-escape functionality — and its successor DUSTMAKER, both aimed at developer and AI coding-assistant credentials (The Hacker News, BleepingComputer). · Sep 9 · observed · via package registry · as altered spider, unc6780 · AI & Model Security

Aug 28 – September 1, 2026 · 2 reports

• ZeroTrace published a deep dive on how the Chinese state-linked QTFY botnet was organised and run, including espionage traffic routed through a paid commercial proxy subscription (Catalin Cimpanu) (earlier coverage). Flare separately documented how its researchers de-anonymised the TeamPCP members arrested in Australia last week (Catalin Cimpanu). · Sep 1 · none · as qtfy · Threat Activity
• Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, appeared in Perth Magistrates Court facing 14 combined offences over alleged membership in TeamPCP, the group behind the March 2026 compromises of open-source scanners Trivy and Checkmarx KICS and the AI gateway LiteLLM (The Hacker News). The AFP describes a syndicate that "created malicious open-source software to rob thousands of global businesses"; Krebs has the deepest account of the multi-year package-registry campaign and the US–Australian cooperation behind the arrests (KrebsOnSecurity). · Aug 28 · observed · via package registry · Supply Chain & Takedowns

Aug 13 – August 22, 2026

• Terabytes of developer credentials and secrets are being traded following mass exposure tied to LiteLLM deployments, with the actor identified as TeamPCP and screenshots pointing at victims including Microsoft. Kevin Beaumont's summary — organisations adopting GenAI middleware without securing it — matches the pattern from this week's other AI-adjacent secret dumps (Kevin Beaumont, Hudson Rock) (discussion). · Aug 22 · observed · via supply chain · Cloud & Identity

August 9, 2026

• TeamPCP traced back to Redis attacks since 2020, showing the group compromised internet-facing infrastructure for years before pivoting into software supply-chain campaigns, tied together by overlapping domains and staging techniques (The Hacker News). · Aug 9 · observed · via supply chain · Threat Activity

July 5, 2026

• FBI warns of TeamPCP supply-chain attacks on developer tools used to steal cloud credentials and deploy malware, urging tighter build-pipeline controls and monitoring. Security Affairs · Jul 5 · observed · via supply chain · Threat Activity

July 3, 2026

• Sophos documented a 2026 partnership between Vect and TeamPCP abusing supply-chain attacks on security tooling for credential theft and ransomware. Sophos. · Jul 3 · observed · via supply chain · as vect · Threat Activity