Topic: teampcp threat group

TeamPCP Ransomware Shift Raises Threat Despite Slower Attacks

April 1, 2026

100%

TeamPCP Ransomware Shift Raises Threat Despite Slower Attacks

TeamPCP has not retreated but has strategically paused its supply chain attacks to partner with a new ransomware-as-a-service (RaaS) operation called Vect, aiming to monetize stolen credentials. The group has rapidly evolved since 2024, building automated attack capabilities and demonstrating ada...

Software Supply Chain Attacks Cause Data Breaches

A series of software supply chain attacks on popular open-source libraries has created a large pool of stolen credentials, which Google researchers warn could fuel further cybercrime like ransomware and cryptocurrency theft. The threat actor group TeamPCP is actively exploiting these stolen secre...

Trivy Supply Chain Attack Spreads via Compromised Docker Images

The Trivy supply chain attack has escalated with newly discovered malicious Docker images (versions 0.69.5 and 0.69.6) now circulating, broadening the threat to development and CI/CD pipelines. The attack, linked to the TeamPCP threat group, involves malware designed to steal credentials and has ...