Authorities arrest 2 alleged members of prolific hacking group TeamPCP

Authorities in Australia stated Wednesday that they arrested two males accused of taking part in cybercrimes for TeamPCP, a prolific group of hackers that, over 9 months, has carried out a relentless collection of supply-chain assaults that contaminated greater than 1,000 organizations worldwide.

In a assertion, the Australian Federal Police stated the 2 males have been arrested and charged with 14 offenses. The assertion stated the lads have been members of TeamPCP, which by the authorities’ rely, compromised greater than 1,000 organizations worldwide. The assertion didn’t establish the lads, besides to say they lived within the Western Australian cities of Cottesloe and Mandurah. KrebsOnSecurity, citing a prolonged investigation, supplied what it reviews to be each defendants’ names, together with an in depth background of their lives and the errors that led to their downfall.

The hacks that carry on hacking

TeamPCP has vexed legislation enforcement officers and safety personnel world wide because it emerged in December. The group is finest recognized for a sustained collection of supply-chain assaults that laced open supply software program with malware that self-propagated from one bundle to a different. The viral infections labored by concentrating on organizations’ CI/CD pipelines, that are used to quickly develop, replace, and deploy software program.

As soon as a bundle or software was compromised, Shai-Hulud, because the worm was dubbed, hooked up itself to future bundle updates. When builders downloaded the compromised packages and ran them by way of their very own CI/CD platforms, their software program was additionally compromised.