Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos

Two alleged TeamPCP members arrested and charged after months of software supply-chain chaos
Two men from Western Australia were arrested and charged for their alleged roles in TeamPCP, a cybercrime group tied to malicious code inserted into widely used open-source software and attacks that affected more than 1,000 organizations worldwide. Investigators say the campaign involved Trivy, mini Shai-Hulud, and stolen credentials, while law enforcement and researchers continue to trace the group’s infrastructure and online identities. #TeamPCP #Trivy #miniShaiHulud #AquaSecurity #GitHub #EuropeanCommission

Keypoints

  • Two Western Australia men were arrested and charged for alleged links to TeamPCP.
  • TeamPCP inserted malicious code into widely used open-source software.
  • The campaign reportedly compromised more than 1,000 organizations worldwide.
  • Attack activity included a malicious Trivy release and the self-replicating mini Shai-Hulud malware.
  • Researchers and police traced online identities and infrastructure tied to the suspects.

Read More: https://cyberscoop.com/teampcp-cybercrime-arrests-supply-chain-attacks/