Minacce e avversari · Supply chain

TeamPCP interrompe nuovi compromessi supply chain e monetizza bottino

TeamPCP ha continuato una campagna supply chain multi-target dal 19 marzo. Nelle ultime 48 ore non sono stati confermati nuovi compromessi di package. Gli analisti ritengono che il gruppo sia passato a monetizzare le credenziali rubate e abbia annunciato un'affiliazione con Vect ransomware.

2 fonti · 1 apr

Cronologia

• 9 apr Scadenza federale CISA per CVE-2026-33634
• 1 apr Segnalato da Infosecurity Magazine
• 30 mar Segnalato da SANS ISC

Fonti

• 1 apr Infosecurity Magazine

  TeamPCP Explores Ways to Exploit Stolen Supply Chain Secrets

  TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs

  originale

• 30 mar SANS ISC

  TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released

  TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, Author: Kenneth Hartman

  originale

• 28 mar SANS ISC

  TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours

  TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, Author: Kenneth Hartman

  originale

Part of the PlainSec briefing for 2026-03-29

Every edition of this story: TeamPCP interrompe nuovi compromessi supply chain e monetizza bottino

Altro da oggi

• TeamPCP Inserisce Malware Rubacredenziali in LiteLLM