Google details how it disrupted TeamPCP operations from inside
1 Sep 18 12:00 PM · 5d ago · 2 articles · 6 posts · 4 sources · development 1 of 1
Larsen reveals Google used its undercover access to monitor the hacking spree, warn breach targets including GitHub, Mercor, OpenAI, and the European Commission, and help disrupt the group's extortion attempts. Google also traced operational security mistakes by one suspect and shared identifying details with law enforcement, while receiving intelligence from ShinyHunters, a rival criminal group that turned against TeamPCP.
“One of our personas had been working for many months to build trust with one of the actors that was invited to join TeamPCP, and so was added to the group. So essentially, almost day one, Mandiant was watching everything behind the scenes.”
Austin Larsen, Google Threat Intelligence Group researcher · rss ↗Austin Larsen Google Threat Intelligence Group researcherRuben Ian Thomson Alleged TeamPCP leaderLouis Michael Gaebler Alleged TeamPCP leaderGoogle Threat Intelligence Group / Mandiant Security researchers and threat intelligence divisionTeamPCP Cybercriminal hacking group
The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump
What was reported 1 claim about this development
-
first by Wired, 5d ago · also Ars Technica
1 more headline
What people said 2 voices · best of 5 · verbatim
-
A
As the TeamPCP cybercrime group carried out an unprecedented spree of software supply chain hacking this year, it had been infiltrated by an undercover analyst from Google's threat intel division. Google watched from inside, warned victims, even disrupted extortions. https://www. wired.com/story/an-undercover-…
-
NEW: A Google researcher snuck into the group chat of TeamPCP, the hacker gang responsible for the worst-ever supply chain hacking spree, allowing the company to disrupt the group's attacks. @agreenberg.bsky.social has the scoop:
All 1 developments of Google reveals undercover analyst infiltrated TeamPCP… →
MastodonNewswiresBlueskyHacker News