Google Analyst Infiltrated Software Supply Chain Hacking Gang TeamPCP
· Technology · Wired, Ars Technica
A Google Threat Intelligence Group researcher revealed that an undercover analyst from Google's Mandiant security subsidiary infiltrated the hacker group TeamPCP from nearly the beginning of its operations. TeamPCP carried out a widespread supply chain hacking campaign that compromised hundreds of open-source programs and breached over a thousand companies using a Dune-themed self-spreading worm. Google monitored the activity from the inside, warned targets, and assisted in disrupting exploitation attempts before sharing identifying details with law enforcement. Australian police arrested two early-20-year-old Australian nationals, Ruben Ian Thomson and Louis Michael Gaebler, late last month in connection with the attacks. The group had also partnered with cybercriminal outfit ShinyHunters before that relationship turned adversarial.
Why it matters
The infiltration demonstrates how threat intelligence teams can compromise sophisticated cybercrime operations from within, helping law enforcement dismantle major software supply chain threats.
Read the original report — Wired
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.