FBI Says TeamPCP Uses Trojanized Updates to Steal Cloud Tokens, SSH Keys, and Kubernetes Secrets

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials

FBI: TeamPCP Compromised Dev Tools to Steal Cloud CredentialsFB

Vect and TeamPCP partner for ransomware campaigns | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

Counter Threat Unit™ (CTU) researchers investigated two interconnected threat groups known as Vect and TeamPCP. The two groups announced a formal operational partnership in late March 2026 to combine TeamPCP’s credential harvesting and data theft capabilities with Vect’s ransomware deployment infrastructure in a widespread campaign involving supply chain attacks and the extortion of multiple organizations. […] Thank you for subscribing to our RS…

FBI Warns TeamPCP Hackers Compromise Developer Tools in Large-Scale Supply Chain Attacks

A new wave of software supply chain attacks has put developers and security teams on high alert. The threat group behind it, known as TeamPCP, has been quietly slipping malicious code into trusted development and security tools used by companies worldwide. Once inside, the group harvests cloud credentials, SSH keys, and other sensitive secrets that can unlock entire corporate networks. What makes this campaign especially dangerous is its scale a…

Cyber experts issue alert after two ransomware groups team up on ‘unprecedented’ threat campaign

Ransomware groups Vect and TeamPCP are now working together in a widespread campaign involving supply chain attacks and the extortion of multiple organizations.The tie-up, which the two announced in March, sees TeamPCP’s credential harvesting and data theft capabilities combined with Vect’s ransomware deployment infrastructure.According to Sophos, this alliance represents a huge shift in the ransomware threat landscape. The convergence of supply…

FBI Says TeamPCP Uses Trojanized Updates to Steal Cloud Tokens, SSH Keys, and Kubernetes Secrets

The Federal Bureau of Investigation (FBI) has issued an urgent FLASH advisory warning that the cybercriminal group TeamPCP is weaponizing trojanized software updates to harvest cloud access tokens, SSH keys, and Kubernetes secrets at scale. This campaign represents one of the most sophisticated software supply chain attacks observed in 2026, exploiting trust in widely deployed […] The post FBI Says TeamPCP Uses Trojanized Updates to Steal Cloud …