Two men have been arrested in Australia and charged over their alleged membership in TeamPCP, a cybercrime group blamed for a sustained wave of software supply chain attacks. The arrests were confirmed by the Australian Federal Police, and both sources describe TeamPCP as unusually prolific, with one calling it the longest-running spree of supply chain attacks ever observed.
The impact was broad: more than 1,000 organisations were hit, and roughly 500,000 credentials were stolen, according to the Bitdefender report. Among the targets was OpenAI, though the sources do not specify what was taken from it. The group also deployed a self-propagating worm named Shai-Hulud, a reference to the giant sandworms in the Dune novels.
The two sources agree on the core facts of the arrests and the scale of the operation. They differ slightly in emphasis: the Bitdefender piece highlights the worm and the credential count, while Krebs focuses on the longevity of the campaign and the group's reputation for data extortion. No court dates or detailed charges have been released yet.