Google’s Mole Inside TeamPCP: How an Undercover Analyst Watched a Supply-Chain Rampage Unfold

Google’s Mole Inside TeamPCP: How an Undercover Analyst Watched a Supply-Chain Rampage Unfold

Google had an undercover analyst inside TeamPCP's core CanisterWorm chat as the group executed one of the largest software supply chain attacks in history. The source provided real-time warnings, helped disrupt extortions and exposed stolen credential troves. The operation highlights rare human intelligence success against fluid cybercrime networks.

An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang

TeamPCP pulled off the worst-ever software supply chain hacking spree and breached thousands of companies. Now Google’s threat intelligence group has revealed it had a mole inside the hackers’ inner circle.

An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang

Before two of its alleged members were arrested and charged in Australia last month, the hacker group known as TeamPCP carried out a hacking spree unlike any other in history. It tainted hundreds of open-source programs with its malware, stole developer accounts to perpetuate that software supply-chain hacking, and even released a Dune-themed self-spreading worm

A Google Analyst Spent Months Undercover Inside a Notorious Hacking Gang

A Google Threat Intelligence Group researcher spent months building an undercover persona that infiltrated TeamPCP, the hacking collective behind a massive npm supply chain spree. The operation, detailed by Austin Larsen at LABScon and first reported by Wired, fed law enforcement the operational security mistakes that led to the arrest of two alleged Australian ringleaders.