Google’s threat intelligence team infiltrated supply-chain hacking gang TeamPCP

Google’s threat intelligence group embedded an undercover analyst inside the hacking gang TeamPCP during the group’s 2025–2026 supply-chain attacks, according to a presentation by researcher Austin Larsen at SentinelOne’s LABScon conference.

The analyst gained access to TeamPCP’s core chat, called CanisterWorm, and a server storing credentials stolen from over a thousand breached organizations, including OpenAI, the European Commission, and GitHub.

Google used this access to warn cloud providers like Amazon Web Services and Microsoft to revoke compromised credentials, preventing TeamPCP from exploiting them for extortion or further breaches.

TeamPCP allegedly compromised open-source tools such as the security scanner Trivy, the AI API tool LiteLLM, and the enterprise AI platform Mistral AI to facilitate its supply-chain attacks.

Mandiant, Google’s security subsidiary, had a separate undercover analyst embedded within TeamPCP’s inner circle from nearly the group’s inception, Larsen said.

Google also received intelligence from the cybercriminal group ShinyHunters, which partnered with TeamPCP before turning on the supply-chain hackers.

During the operation, Google discovered TeamPCP was using an AI tool to develop a zero-day exploit targeting a widely used login software’s two-factor authentication, which Google reported to the software developer for patching.

Two alleged leaders of TeamPCP, Ruben Ian Thomson and Louis Michael Gaebler, were arrested in Australia in August 2026 following a joint investigation with the FBI and were charged with hacking crimes.