Australia nabs two TeamPCP suspects tied to global supply-chain hack spree
TL;DR
Australian Federal Police arrested two men linked to TeamPCP for a nine‑month, global supply‑chain campaign that infected over 1,000 organizations by compromising CI/CD pipelines and downstream packages like Trivy; the suspects face multiple charges and potentially decades in prison if convicted, with investigators noting credential theft and a canister-based mechanism helping the malware persist.
- Authorities arrest 2 alleged members of prolific hacking group TeamPCP Ars Technica
- Two Alleged ‘TeamPCP’ Hackers Arrested in Australia Krebs on Security
- Rookie Mistake: Hacker's Attachment to Screen Name Made Him Easy to Catch Yahoo
- TeamPCP arrests don't fix the supply chain risk they exposed Aikido Security
- Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos CyberScoop
Want the full story? Read the original reporting
Read on Ars Technica