Threats & Adversaries · Supply Chain
TeamPCP Pauses New Supply-Chain Compromises, Monetizes Haul TeamPCP maintained a multi‑target supply‑chain campaign dating to March 19. No new package compromises were confirmed in the past 48 hours. Analysts say operators have shifted to monetizing harvested credentials and announced a Vect ransomware affiliate.
2 sources · Apr 1
NVD KEV
Known exploited · CISA KEV
CISA federal remediation date Apr 9
Timeline Sources Apr 1 Infosecurity Magazine
TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets
TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs
original Mar 30 SANS ISC
TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released
TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, Author: Kenneth Hartman
original Mar 28 SANS ISC
TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours
TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, Author: Kenneth Hartman
original Part of the PlainSec briefing for 2026-03-29
Every edition of this story: TeamPCP Pauses New Supply-Chain Compromises, Monetizes Haul
More from today Threats & Adversaries · Supply Chain
TeamPCP Pauses New Supply-Chain Compromises, Monetizes Haul TeamPCP maintained a multi‑target supply‑chain campaign dating to March 19. No new package compromises were confirmed in the past 48 hours. Analysts say operators have shifted to monetizing harvested credentials and announced a Vect ransomware affiliate.
2 sources · Apr 1
NVD KEV
Known exploited · CISA KEV
CISA federal remediation date Apr 9
Timeline Sources Apr 1 Infosecurity Magazine
TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets
TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs
original Mar 30 SANS ISC
TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released
TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, Author: Kenneth Hartman
original Mar 28 SANS ISC
TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours
TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, Author: Kenneth Hartman
original Part of the PlainSec briefing for 2026-03-29
Every edition of this story: TeamPCP Pauses New Supply-Chain Compromises, Monetizes Haul
More from today