Minacce e avversari · Supply chain

TeamPCP interrompe compromissioni supply‑chain, monetizza credenziali

TeamPCP ha interrotto nuove compromissioni di pacchetti per 48 ore. Ha spostato l'attività verso la monetizzazione tramite un affiliato Vect. La raccolta di credenziali stimata in ~300 GB abilita possibili future intrusioni supply‑chain e CISA ha aggiunto CVE‑2026‑33634 al catalogo KEV.

2 fonti · 1 apr

Cronologia

• 9 apr Scadenza federale CISA per CVE-2026-33634
• 1 apr Segnalato da Infosecurity Magazine
• 30 mar Segnalato da SANS ISC

Fonti

• 1 apr Infosecurity Magazine

  TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets

  TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs

  originale

• 30 mar SANS ISC

  TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released

  TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, Author: Kenneth Hartman

  originale

• 28 mar SANS ISC

  TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours

  TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, Author: Kenneth Hartman

  originale

Part of the PlainSec briefing for 2026-03-28

Every edition of this story: TeamPCP interrompe compromissioni supply‑chain, monetizza credenziali

Altro da oggi

• TeamPCP Compromette SDK Telnyx su PyPI