Australia Arrests Two Alleged Members of Prolific Hacking Group TeamPCP
Australian authorities announced Wednesday the arrest of two men accused of participating in cybercrimes for TeamPCP. The group is believed to have conducted supply-chain attacks impacting over 1,000 organizations worldwide.
Authorities in Australia announced on Wednesday the arrest of two men accused of participating in cybercrimes for TeamPCP, a hacking group believed to have carried out supply-chain attacks impacting more than 1,000 organizations globally over a nine-month period.
The Australian Federal Police stated that the two men were arrested and charged with 14 offenses, alleging their membership in TeamPCP. The group has reportedly compromised over 1,000 organizations worldwide. The identities of the arrested individuals were not disclosed, but they are reportedly residents of Cottesloe and Mandurah in Western Australia.
TeamPCP emerged in December and has been a focus for law enforcement and security personnel due to its persistent supply-chain attacks. These attacks involved infecting open-source software with malware that self-propagated between packages. The infections targeted organizations' CI/CD (Continuous Integration/Continuous Deployment) pipelines, which are integral to rapid software development and deployment.
Investigations are ongoing to determine the full scope of the group's activities and identify other potential members. The nature of these attacks highlights the vulnerabilities inherent in software supply chains in the digital age.