Google Infiltrates Notorious Hacking Group TeamPCP

Google's threat intelligence group has revealed that an undercover researcher infiltrated TeamPCP, a notorious hacking group behind a widespread software supply-chain attack campaign. The infiltration provided crucial inside information to Google, allowing them to warn targeted companies and disrupt the hackers' exploitation attempts.

The team compromised hundreds of programs and breached over 1,000 companies, including GitHub, Mercor, and OpenAI. They also released a self-spreading worm to automate their attacks.

The undercover analyst's role within TeamPCP's inner circle enabled Google to revoke stolen credentials and obtain and help patch a zero-day exploit developed using AI.

Law enforcement was also aided in identifying and arresting two alleged key members of TeamPCP in Australia.