[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2fyZQ92q3B_cJrHqqpN1n_dW8E5KhOy7w5SNsJPL_r4":3},{"article":4,"iocs":43,"watch_terms":58},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":23,"category":24,"article_tags":27},"a2863d98-86d6-4e8e-8c5f-d8753b426f49","https:\u002F\u002Fspm-cdn-assets-dist-2026.s3.us-east-2.amazonaws[.]com\u002Fbootstrap.sh\n🤔\n\"# System Performan...","https-spm-cdn-assets-dist-2026-s3-us-east-2-amazonaws-com-bootstrap-sh-system-pe-574559","https:\u002F\u002Fspm-cdn-assets-dist-2026.s3.us-east-2.amazonaws[.]com\u002Fbootstrap.sh\n🤔\n\"# System Performance Monitor Bootstrap\"\n\"# Delivered via React2Shell\"\n\"Never install on our own infrastructure\"\n\"Detect and remove TeamPCP (PCPcat)\"\n🤷‍♂️ https:\u002F\u002Ft.co\u002Fn3jpIdFXIJ","A malicious shell script hosted on a spoofed AWS S3 domain (spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws[.]com) was used to deliver TeamPCP (also known as PCPcat) malware. The script masquerades as a \"System Performance Monitor Bootstrap\" and was delivered via React2Shell exploitation. Security researchers are warning of the need to detect and remove the TeamPCP malware from affected systems.","Malicious bootstrap script distributed via AWS S3 deploys TeamPCP\u002FPCPcat malware.",null,"https:\u002F\u002Fx.com\u002Fmalwrhunterteam\u002Fstatus\u002F2049224797473714177","https:\u002F\u002Fpbs.twimg.com\u002Fmedia\u002FHHBOGwFaIAAwZs4.jpg","2026-04-28T20:30:39+00:00","2026-04-28T21:00:15.073829+00:00",8,[18,21],{"name":19,"type":20},"React2Shell","technology",{"name":22,"type":20},"AWS S3","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":23,"icon":11,"name":25,"slug":26},"Malware","malware",[28,33,38],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"c5eccf7c-abbc-4bd3-bbed-e6da5cba8e73","Incident Response","incident-response",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44,48,52,55],{"type":45,"value":46,"context":47},"domain","spm-cdn-assets-dist-2026.s3.us-east-2.amazonaws[.]com","Malicious S3 bucket domain hosting bootstrap.sh malware delivery script",{"type":49,"value":50,"context":51},"url","https:\u002F\u002Fspm-cdn-assets-dist-2026.s3.us-east-2.amazonaws[.]com\u002Fbootstrap.sh","Direct URL to malicious shell script deploying TeamPCP malware",{"type":26,"value":53,"context":54},"TeamPCP","Malware family delivered via bootstrap script; also known as PCPcat",{"type":26,"value":56,"context":57},"PCPcat","Alias for TeamPCP malware",[]]