Authorities arrest 2 alleged members of prolific hacking group TeamPCP
Summary
Australian police arrested two men suspected of being members of TeamPCP, a hacking group that infected over 1,000 organizations worldwide by attacking software supply chains. The group used malware that spread through software development tools to steal credentials and compromise many packages.Key Facts
- Two men from Western Australia towns Cottesloe and Mandurah were arrested and charged with 14 offenses.
- TeamPCP carried out supply chain attacks from December that infected more than 1,000 organizations worldwide.
- The hackers used malware called Shai-Hulud to spread through software development pipelines known as CI/CD.
- Shai-Hulud stole credentials from infected machines to breach other software packages.
- The Trivy vulnerability scanner was one of the key tools compromised, leading to further infections in related software.
- The malware used a smart contract system called an Internet Computer Protocol-based canister to avoid detection.
- One suspect could face more than 20 years in prison, and the other more than 10 if convicted.
- Security experts noted the attackers lacked the usual careful planning typical of such advanced hacking groups.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.
