Google analyst infiltrated TeamPCP supply-chain hacking gang

Google's threat intelligence group revealed it had an undercover analyst inside the hacking group TeamPCP, which breached over a thousand companies through a massive software supply-chain attack. The infiltration allowed Google to monitor the group's activities and warn potential targets. Two alleged TeamPCP members were arrested and charged in Australia last month. The group tainted hundreds of open-source programs, stole developer accounts, and released a Dune-themed worm to automate its attacks. Google also received intelligence from ShinyHunters, a rival cybercriminal group that turned on TeamPCP. Mandiant, Google's security subsidiary, placed the undercover analyst within TeamPCP's inner circle nearly from the start, building trust with a member over months. Google researcher Austin Larsen will present the investigation details at SentinelOne's LABScon conference.