An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang

An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang

TeamPCP pulled off the worst-ever software supply chain hacking spree and breached thousands of companies. Now Google’s threat intelligence group has revealed it had a mole inside the hackers’ inner circle.

An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang

Before two of its alleged members were arrested and charged in Australia last month, the hacker group known as TeamPCP carried out a hacking spree unlike any other in history. It tainted hundreds of open-source programs with its malware, stole developer accounts to perpetuate that software supply-chain hacking, and even released a Dune-themed self-spreading worm

A Google Analyst Spent Months Undercover Inside a Notorious Hacking Gang

A Google Threat Intelligence Group researcher spent months building an undercover persona that infiltrated TeamPCP, the hacking collective behind a massive npm supply chain spree. The operation, detailed by Austin Larsen at LABScon and first reported by Wired, fed law enforcement the operational security mistakes that led to the arrest of two alleged Australian ringleaders.