Risky Bulletin: Two TeamPCP members arrested in Australia
Australian Federal Police arrested two alleged TeamPCP members behind supply-chain worm attacks that stole over 500,000 credentials from compromised open-source libraries.
The AFP arrested alleged TeamPCP leader Ruben Thomson, 21, and Louis Gaebler, 23, near Perth; both were charged and remain in custody. The group inserted a self-spreading credential-stealing worm into open-source projects including Trivy, KICS, LiteLLM, and Telnyx, harvesting more than 500,000 credentials used for network access, ransomware, extortion, and sales. About 78,000 tokens and secrets from nearly 2,200 organizations leaked online last month, and the FBI supported the investigation that began in April.
- Two suspects charged in Perth: Ruben Thomson (21) and Louis Gaebler (23)
- TeamPCP hid a self-spreading worm in Trivy, KICS, LiteLLM, and Telnyx libraries
- Over 500,000 credentials stolen, fueling ransomware and extortion operations
- 78,000 tokens from almost 2,200 organizations leaked online last month
- FBI joined AFP investigation that began in April
- Threat actors
- TeamPCP
- Organizations
- Australian Federal PoliceFBI
- Countries
- Australia
From the original article
14 min read at news.risky.biz
In other news: Qilin hits US firearms agency; US seizes two more Chinese botnets; CISA says most cyber activity is opportunistic.
By Catalin Cimpanu · news.risky.biz
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.