The Australian Federal Police operation, which launched in April 2026, resulted in the seizure of electronics and stolen data caches. According to FBI cyber division chief Brett Leatherman, the group’s reach spanned more than a thousand organizations. The hackers gained access by injecting malicious code into popular software, such as the vulnerability scanner Trivy, allowing them to siphon private keys and cloud storage credentials from unsuspecting developers.
Australian Police Dismantle TeamPCP Hacking Ring
Two men in Perth face over a dozen charges for their alleged roles in TeamPCP, a prolific hacking group linked to widespread supply chain attacks. The suspects stand accused of compromising open-source tools to harvest half a million credentials, targeting high-profile entities including OpenAI, Mercor, and the European Commission.
While officials withheld the identities of those arrested, cybersecurity journalist Brian Krebs identified one of the suspects as Ruben Thomson, known by the handle Ellis. Krebs reported that Thomson claimed to have led TeamPCP until March 2026 before his operational errors exposed his real-world identity. The suspects are scheduled to appear in court on Thursday to address charges ranging from cybercrime to money laundering. Authorities are currently working to notify the numerous victims affected by the group’s campaign, which targeted major tech infrastructure including GitHub and various AI startups.
Comments (0)
No comments yet. Be the first!