importantSYS.SOURCE: The Hacker News• 2026-08-07T12:20:05+05:30

TeamPCP's Long-Term Redis Attacks and Supply Chain Campaigns Traced Back to 2020

#cybercrime #supply chain attack #vulnerability

TeamPCP has been linked to Redis attacks since 2020, evolving into supply chain campaigns by exploiting vulnerabilities in technologies like React, Docker, and Kubernetes. The group's operations include malware deployment, cryptocurrency mining, and destructive wiper attacks targeting specific geographic regions.

A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain.

"The connection is supported by overlapping domains, malware deployment paths, staging techniques, backend infrastructure,

Read original article

*** END OF TRANSMISSION ***

> NEW MEXICO COURT ORDERS META TO PAY $567M IN CHILD SAFETY VIOLATION CASE > THE MISCONCEPTION OF TIME IN CLIMATE ACTION AND ITS IMPLICATIONS > MICROSOFT 365 AITM PHISHING CAMPAIGN TARGETS PAYROLL AND FINANCE EMAILS > US GOVERNMENT PAYS RWE $1.2B TO ABANDON OFFSHORE WIND PROJECTS UNDER TRUMP ADMINISTRATION > AI-ASSISTED HTTP TERMINATOR DISCOVERS NEW HTTP DESYNCHRONIZATION TECHNIQUES AND APACHE ZERO-DAY VULNERABILITY > NATJACK ATTACK EXPLOITS NAT TABLE MANIPULATION TO HIJACK TCP SESSIONS AND SPOOF DNS > MALWARE EXPLOITS WINDOWS HELLO FOR BUSINESS FOR PERSISTENT ENTRA ID ACCESS > VULNERABILITIES IN CLAUDE CODE AND GEMINI CLI ALLOW UNAUTHORIZED ACCESS TO CI SECRETS VIA GITHUB ISSUES > TEAMPCP'S LONG-TERM REDIS ATTACKS AND SUPPLY CHAIN CAMPAIGNS TRACED BACK TO 2020 > SUCCESSFUL COMPILATION OF NETSCAPE 3.0.2 ON 64-BIT DEBIAN SYSTEM> NEW MEXICO COURT ORDERS META TO PAY $567M IN CHILD SAFETY VIOLATION CASE > THE MISCONCEPTION OF TIME IN CLIMATE ACTION AND ITS IMPLICATIONS > MICROSOFT 365 AITM PHISHING CAMPAIGN TARGETS PAYROLL AND FINANCE EMAILS > US GOVERNMENT PAYS RWE $1.2B TO ABANDON OFFSHORE WIND PROJECTS UNDER TRUMP ADMINISTRATION > AI-ASSISTED HTTP TERMINATOR DISCOVERS NEW HTTP DESYNCHRONIZATION TECHNIQUES AND APACHE ZERO-DAY VULNERABILITY > NATJACK ATTACK EXPLOITS NAT TABLE MANIPULATION TO HIJACK TCP SESSIONS AND SPOOF DNS > MALWARE EXPLOITS WINDOWS HELLO FOR BUSINESS FOR PERSISTENT ENTRA ID ACCESS > VULNERABILITIES IN CLAUDE CODE AND GEMINI CLI ALLOW UNAUTHORIZED ACCESS TO CI SECRETS VIA GITHUB ISSUES > TEAMPCP'S LONG-TERM REDIS ATTACKS AND SUPPLY CHAIN CAMPAIGNS TRACED BACK TO 2020 > SUCCESSFUL COMPILATION OF NETSCAPE 3.0.2 ON 64-BIT DEBIAN SYSTEM