Tuesday 15 September 2026
Evening EditionRSS

ZOTPAPER

News without the noise

ZOTPAPER
Security

Two Alleged Members of Prolific Hacking Group TeamPCP Arrested in Australia

Australian Federal Police charge two Western Australian men with 14 offenses linked to global supply chain attacks affecting over 1,000 organizations

edit
By LineZotpaper
Published
Read Time2 min
Australian authorities have arrested two men accused of being members of TeamPCP, a hacking group responsible for a relentless nine-month campaign of supply chain attacks that compromised more than 1,000 organizations worldwide. The Australian Federal Police charged the men with 14 offenses, according to a statement released Wednesday.

The arrests took place in the Western Australian towns of Cottesloe and Mandurah, the Australian Federal Police (AFP) said in a statement. The two men, whose names were not officially released but were reported by KrebsOnSecurity following an extensive investigation, are alleged to have participated in cybercrimes for TeamPCP.

The group has vexed law enforcement and security personnel since it emerged in December, earning a reputation for persistent supply chain attacks. TeamPCP targeted organizations' CI/CD pipelines—systems used to rapidly develop, update, and deploy software—by lacing open-source software with malware that self-propagated from one package to another. These viral infections enabled the group to compromise over 1,000 organizations globally within nine months.

The AFP statement did not provide further operational details but confirmed the arrests were made in coordination with the FBI and the Western Australia Police Force. The charges cover 14 offenses, though specific counts have not been publicly detailed. The investigation into TeamPCP's activities continues, with authorities urging organizations to review their software supply chain security.

§

Analysis

Why This Matters TeamPCP's supply chain attacks represent a significant escalation in cyber threat tactics. By compromising CI/CD pipelines and poisoning open-source packages, the group demonstrated how a relatively small number of attackers can wreak havoc on a global scale, potentially affecting thousands of downstream users through a single compromised update.

Background TeamPCP emerged in December 2025 and quickly became one of the most active cybercriminal groups, focusing on supply chain compromises. Their method of infecting widely used open-source software packages allowed them to propagate malware automatically through software development workflows. Law enforcement agencies, including the AFP and FBI, have been tracking the group for months, culminating in these arrests.

Key Perspectives

  • The AFP frames the arrests as a significant disruption of a global cyber threat, highlighting international cooperation between Australian and U.S. authorities.
  • Security researchers have noted that TeamPCP's techniques were unusually sophisticated and persistent, often exploiting trusted software distribution channels.
  • The group's victims span multiple industries, though the AFP statement did not identify specific organizations or countries.

What to Watch

  • The identities and court appearances of the accused: further details may emerge during legal proceedings.
  • Whether the arrests disrupt ongoing TeamPCP operations or if remaining members continue attacks.
  • Potential guidance from cybersecurity agencies on mitigating supply chain risks in light of these incidents.

Sources

newspaper

Zotpaper

Articles published under the Zotpaper byline are synthesized from multiple source publications by our AI editor and reviewed by our editorial process. Each story combines reporting from credible outlets to give readers a balanced, comprehensive view.

Editorial ProcessSubscribe