
Australian authorities arrest two suspects in TeamPCP supply-chain attack campaign
The Australian Federal Police arrested two men from Western Australia accused of participating in TeamPCP, a cybercrime group responsible for a nine-month campaign of supply-chain attacks. The group infected over 1,000 organizations using a self-propagating worm called Shai-Hulud, which targeted open-source software and CI/CD pipelines. While the AFP did not name the suspects, investigative reporting identifies one as a 21-year-old man linked to multiple cybercrime forums and a neo-Nazi network. The arrests follow a series of high-profile compromises, including attacks on AI infrastructure and popular developer tools, with the suspects facing potential prison sentences of over 10 and 20 years.


