Before 2 of its supposed members were apprehended and charged in Australia last month, the hacker group called TeamPCP performed a hacking spree unlike any other in history. It polluted numerous open-source programs with its malware, took designer accounts to perpetuate that software application supply-chain hacking, and even launched a Dune-themed self-spreading worm to automate the procedure, eventually breaching more than a thousand business.

Now Google’s hazard intelligence group has actually exposed that throughout an essential minute of TeamPCP’s rampage, the business’s own undercover scientist had actually penetrated the group– enabling Google to keep track of the hacking spree from the within, alert breach targets, and even assist interfere with the group’s efforts to make use of those victims.

In a talk at security company SentinelOne’s LABScon research study conference today, Google Threat Intelligence Group scientist Austin Larsen will provide information on the business’s examination– and seepage– of TeamPCP in the middle of the group’s unmatched, disorderly supply-chain hacking project. According to Larsen, Google ultimately followed a path of functional security errors supposedly made by among the 2 Australians now implicated of being prominent members of the hacker group and handed down crucial recognizing information to police. The business likewise got intelligence from ShinyHunters, another notorious cybercriminal group that TeamPCP partnered with, however which later on switched on the supply-chain hackers. And possibly most remarkably, Larsen states that Google’s security subsidiary Mandiant had an undercover expert– not himself– within the group’s inner circle from nearly the start of TeamPCP’s time in the spotlight.

“One of our personalities had actually been working for numerous months to develop trust with among the stars that was welcomed to sign up with TeamPCP, therefore was contributed to the group,” Larsen informed WIRED in an interview ahead of his LABScon talk. “So basically, practically the first day, Mandiant was enjoying whatever behind the scenes.”

The TeamPCP mole

Late last month, Ruben Ian Thomson and Louis Michael Gaebler, both Australians in their early 20s, were detained by Australian cops in a joint examination with support from the FBI, charged with hacking criminal activities, and explained by the Australian Federal Police (AFP)– in a news release that, due to Australian personal privacy laws, did not call them– as “primary individuals” in TeamPCP. The hacker group, which appears to have very first appeared online in late 2025, had actually made headings with a brazen string of cascading supply-chain attacks: It consistently jeopardized open-source software application to conceal its malware, which then permitted it to pirate the qualifications of software application designers and plant its destructive code in yet another extensively utilized tool, in a duplicating cycle.

Beginning this spring, for example, TeamPCP jeopardized the open-source security scanner Trivy, the AI application shows user interface tool LiteLLM, facilities of the web application security company Checkmarx, the web app library TanStack, and the business AI platform Mistral AI. Those duplicated supply-chain attacks, with each allowing the group to cast its internet once again for more victims, eventually permitted the hackers to breach open-source code repository GitHub, information contracting company Mercor, and staff member gadgets at OpenAI, the European Commission, and lots of others who have actually stayed unnamed in public reporting. Sometimes, the group released a worm referred to as Mini Shai-Hulud, called after the sandworms in Duneto automate its hacking and scale as much as much more victims. (The name likewise appeared to describe an earlier Shai-Hulud worm that hackers developed to attempt a comparable method in September 2025, though it’s still unclear if TeamPCP or any of its supposed members were associated with that earlier invasion project.)

Larsen now states that in March, simply as TeamPCP was starting its crazy supply-chain hacking, Google’s own undercover expert was welcomed to sign up with the hackers’ inner circle. That inside source, whose name Larsen decreased to expose, was among about 12 members of the group admitted to a core chat that TeamPCP called CanisterWorm.

“You guys must comprehend that we managed the greatest supplychain [sic] possibly ever tape-recorded in contemporary history,” one TeamPCP member composed in the dripped chats.

Michael Fletcher, a previous AFP expert who now operates in the risk research study department of an Australian telecom company, states he approached Larsen around that time about techniques for keeping an eye on the group’s members and activities. He states that Larsen reacted by asking Fletcher to approach the hackers with care due to the fact that among them was a “friendly,” Fletcher keeps in mind. “I believed, damn, you all have actually been inside this early,” he states.

Google’s undercover expert, Larsen states, accessed to a server where TeamPCP was saving its chest of qualifications taken from its lots of victims: the usernames, passwords, and gain access to tokens it had actually acquired through its hacking and relatively prepared to utilize to obtain target business. Google’s group chose to take action to caution victims and avoid TeamPCP’s ransom plan. “My idea was: How can we, as rapidly as possible, interrupt their project before more compromises can occur?” Larsen states. “Let’s go ruin what they’re doing. That was my objective.”

Instead of concentrate on signaling the owners of the taken qualifications at victim business straight, which Larsen states would have taken too long provided the large variety of breached business, Google initially connected to suppliers where those qualifications might be utilized, like Amazon Web Services and Microsoft, to have actually the qualifications withdrawed and avoid the hackers from exploiting them. Larsen and his group sent numerous alert e-mails to those suppliers and after that to victims, a lot of which got instant actions.

Around the exact same time, Larsen states, Google’s presence into the TeamPCP internal chat likewise enabled it to find out that somebody within the group’s core circle was, unique from the group’s supply-chain hacking, utilizing an AI tool to establish a zero-day make use of in a commonly utilized piece of login software application that would enable the hackers to bypass its two-factor authentication. Google’s group got a copy of the make use of code, checked it out, and discovered that, with a couple of tweaks, it worked– an unusual circumstances of an in-the-wild AI-created hacking strategy that benefited from a formerly unidentified software application vulnerability. Google alerted the software application’s designer, who had the ability to spot its security defect. (The event was explained in a case research study Google launched in May, however without calling TeamPCP or detailing how Google learnt more about the make use of.)

More betrayals, careless opsec

Google’s expert was not, it ends up, the only traitor in TeamPCP’s middle.

Even prior to Google’s disturbance effort, Larsen states, the group had a hard time to benefit from its massive collection of taken information, which, according to the AFP, consisted of over half a million users’ qualifications. Larsen approximates that, in spite of that haul, it was drawing in just 10s of countless dollars in extortion payments, not the millions comparable groups have actually accumulated. In an effort to much better monetize its hacking, TeamPCP welcomed numerous other cybercriminal groups to partner with it, providing them access to the taken qualifications in exchange for a portion of any extortion payments they were able to extract.

Among those cybercriminal partners was ShinyHunters, a years-old, extremely respected hacker group that has actually obtained countless dollars from victims through information theft and ransomware, consisting of in the breach of academic software application platform Canvas that would later on incapacitate countless schools throughout the United States. Around April, a couple of weeks after partnering with TeamPCP, ShinyHunters went rogue, Larsen states, performing its own extortions with TeamPCP’s qualifications however without offering the supply-chain hackers their cut. ShinyHunters presumed regarding show Larsen, unsolicited, a complete log of the group’s chat on TeamPCP’s server– not understanding that he currently had gain access to by means of Google’s mole.

ShinyHunters likewise ridiculed TeamPCP in messages on X, and its louder betrayal got the latter group’s attention. TeamPCP reacted by narrowing its inner circle, moving its information to a brand-new server, and banishing ShinyHunters and a number of other group members from its CanisterWorm chat, consisting of Google’s undercover expert.

“Just erase that and stop sharing shit with shinyhunters,” among the TeamPCP leaders composed.

Even without that inside source, however, Larsen states more standard digital investigator work enabled him to piece together the path of breadcrumbs that would eventually let him find out the identity of Thomson, among the 2 guys charged for supposedly playing “essential” functions in TeamPCP. Larsen discovered in a leakage of user information from the BreachForums hacker online forum that a person of the most active manages in the CanisterWorm chat had actually been signed up with the Gmail address sheepstealing@gmail.com. Combing through other online forum archives, he discovered a 2019 conflict in between somebody with the pseudonym sheepstealing and a seller of pirated Microsoft Office secrets, in which the sheepstealing user required a refund at a PayPal account connected to the e-mail ruben@thomsonfamily.net.au.

After TeamPCP moved its taken qualifications to a server hosted by a various supplier, Larsen states, Google had the ability to discover some contents of the brand-new server– through what Larsen refers to as a “relied on partner”– and likewise that it was being supported to a Google Drive on that very same sheepstealing@gmail.com account.

“When we saw that, I simply believed: There’s no other way. Why would he be sending out all of this illegal, taken product to a Google Drive that’s connected to himself?” Larsen states. “That’s when we offered the idea to the FBI.” Larsen states he got an interested reaction from a representative in a matter of minutes. (Larsen might not have actually been alone in determining Thomson or other supposed TeamPCP hackers prior to their arrest. Reporter and cybersecurity sleuth Brian Krebs, for example, released a story last month setting out his own set of hints that resulted in Thomson’s identity.

In a declaration to WIRED, the FBI decreased to talk about any “active examination” however kept in mind that it “has the ability to validate we make every effort to increase effect on foes through collaborations as recorded in our recently launched FBI Cyber Strategy.” The AFP decreased to comment.

40 Comments