Australia charges two men for TeamPCP supply
Australia charged two Perth men over TeamPCP supply-chain attacks compromising 1,000+ organizations and exposing 500,000+ credentials.
The AFP charged two Perth-based men with a combined 14 offences for their alleged roles in TeamPCP, with payments in cryptocurrency for data intrusion, identity crime, and money laundering. The group's supply-chain attacks targeted developer tools including TanStack, Trivy, and LiteLLM, with downstream victims including the European Commission and GitHub. Investigators estimate the campaign compromised over 1,000 organizations, exposed more than 500,000 credentials, and led to theft of at least 300 GB of data, with remediation costs in the hundreds of millions of dollars. The men could face a combined 82 years if given maximum sentences, though sentences are typically served concurrently.
- Two men charged with 14 combined offences after property searches in Perth suburbs
- Group compromised 1,000+ organizations and exposed 500,000+ credentials
- Targets included TanStack, Trivy, and LiteLLM; victims included European Commission and GitHub
- Maximum possible sentences total 82 years combined for the two men
- Further arrests not ruled out; large volume of seized data still being examined
- Threat actors
- TeamPCP
- Victims
- European CommissionGitHub
- Organizations
- Australian Federal PoliceFBI
- Countries
- Australia
From the original article
2 min read at therecord.media
Two men in Australia were charged Wednesday over their alleged membership in TeamPCP, the cybercrime group blamed for one of the most damaging hacking campaigns of the past year. The men, both based in Perth, Western Australia, were charged with a combined 14 offenses after police executed search warrants at properties in the city’s suburbs and seized electronic devices.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.