Minacce · 46 giorni fa
L’AFP, con l’FBI e la polizia del Western Australia, ha arrestato il 26 agosto due uomini accusati di guidare TeamPCP e ha sequestrato dispositivi per l’analisi forense. La vicenda è uscita dalla sola attribuzione: ora entra nella fase in cui prove, pagamenti e contenuti estratti dai device possono allargare il quadro dell’indagine.
TeamPCP è legato a una campagna di supply chain che ha inserito codice malevolo in software open source e lo ha fatto circolare attraverso strumenti fidati come Trivy e pacchetti npm. Il risultato non è solo compromissione iniziale: sono stati sottratti credenziali e dati che possono restare utili molto dopo l’accesso originario.
Per chi segue minacce supply chain e incident response, il punto è quello che può emergere dai sequestri. Le prove raccolte dagli inquirenti possono far affiorare nuovi indicatori, infrastrutture e compromissioni non ancora pubbliche, anche oltre i casi già attribuiti al gruppo.
12 fonti che coprono questa storia
Authorities arrest 2 alleged members of prolific hacking group TeamPCP
The group infected more than 1,000 organizations in a relentless supply-chain attack campaign.
Police have charged two men from Western Australia over their alleged involvement in TeamPCP, a cybercriminal gang that has been blamed for a massive software supply-chain hacking campaign.
Australian cops cuff alleged TeamPCP masterminds
Alleged crew behind the Shai-Hulud worm and other supply chain attacks nabbed with help from the FBI
Risky Bulletin: Two TeamPCP members arrested in Australia
Two members of TeamPCP arrested in Australia, Qilin hits the US firearms agency, America seizes two more Chinese botnets, CISA says most c [Read More
Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos
Australian authorities have arrested two alleged members of cybercrime group TeamPCP over widespread supply-chain attacks that compromised more than 1,000 organizations worldwide.
Australian police arrest two over TeamPCP hacks targeting Mercor, OpenAI, and others | TechCrunch
The arrests come after a wave of cyberattacks earlier this year targeting tech companies that rely on high-profile and widely used open source software.
Two alleged TeamPCP hackers arrested over global supply chain attacks - Help Net Security
Two alleged TeamPCP hackers were arrested in Australia over cyberattacks that compromised more than 1,000 organizations worldwide.
The Record from Recorded Future
Australia charges two men for TeamPCP supply-chain hacking spree
Two men in Australia were charged Wednesday over their alleged membership in TeamPCP, the cybercrime group blamed for one of the most damaging hacking campaigns of the past year.
Australia Arrests 2 Alleged TeamPCP Hackers
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
Australian police charged two men over their alleged TeamPCP role in supply chain compromises affecting Trivy, KICS, and LiteLLM.
Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever.
Australia arrests alleged TeamPCP hackers behind supply-chain attacks
Australian authorities have arrested and charged two young men accused of being part of the TeamPCP hacking group linked to a string of far-reaching developer supply chain attacks.
Part of the PlainSec briefing for 2026-08-31