Two Alleged ‘TeamPCP’ Hackers Arrested in Australia
Two alleged TeamPCP members arrested in Australia for supply chain attacks.
Run Microsoft?
Get an email when a reviewed story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Australian authorities have arrested two men, aged 21 and 23, suspected of being members of the cybercrime group TeamPCP. This group is known for extensive software supply chain attacks, embedding malicious code in open-source software and extorting businesses. Their tactics included compromising code repositories and using self-propagating worms like Shai-Hulud to steal credentials and publish malicious versions of software development tools.
The lesson from this incident
Full lessonThe TeamPCP group exploited the inherent trust developers place in open-source repositories by embedding malicious code directly into widely used software development tools. Their use of self-propagating worms like Shai-Hulud to harvest credentials amplified the damage, turning compromised developer environments into launchpads for further attacks. This case highlights how a single poisoned package can cascade across hundreds or thousands of downstream organizations. Without robust integrity verification and dependency monitoring, businesses remain blind to malicious code hiding in plain sight within trusted tools.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
- malware — Shai-Hulud