APT Explorer

All actors

TeamPCP

Also reported as ShellForce, DeadCatx3, Altered Spider, PCPcat, CanisterWorm and 4 other names.

Reports
133
Last reported
Known CVEs
11
Techniques in ATT&CK
36
ID
G1056
Sources
ATT&CKMISPMalpediaMicrosoft
Merge evidence
11 alias matches

Reports per quarter

Dated reports, 2010 Q1 to 2026 Q3.

Techniques seen in the last two years

Show all 102 techniques Show fewer

Counts come from technique IDs in the actor's report text. “Reports only” means reports name the technique but MITRE ATT&CK® does not list it for this actor.

Also listed by ATT&CK

Show all 15 techniques Show fewer

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. TeamPCP expands: Supply chain compromise spreads from Trivy to Checkmarx GitHub Actions

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. Trivy ecosystem supply chain temporarily compromised

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. TeamPCP deploys CanisterWorm on NPM following Trivy compromise

    date ORKL added it ORKL

    Archived copy on ORKL Details

  5. TeamPCP Wave Four: GitHub Breach via Poisoned VS Code Extension, durabletask PyPI Worm, and ~4,000 Internal Repositories Exfiltrated

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Account

    date ORKL added it ORKL

    Archived copy on ORKL Details

  7. Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft

    date ORKL added it ORKL

    Archived copy on ORKL Details

  8. Popular telnyx package compromised on PyPI by TeamPCP

    date ORKL added it ORKL

    Archived copy on ORKL Details

  9. Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised

    date ORKL added it ORKL

    Archived copy on ORKL Details

  10. Trivy Compromised: Everything You Need to Know about the Latest Supply Chain Attack

    date ORKL added it ORKL

    Archived copy on ORKL Details

Show all 133 reports Show fewer

  1. Adversaries Leverage AI for Vulnerability Exploitation, Augmented Operations, and Initial Access

    date ORKL added it ORKL

    Archived copy on ORKL Details

  2. Update: Ongoing Investigation and Continued Remediation

    date ORKL added it ORKL

    Archived copy on ORKL Details

  3. The Mini Shai-Hulud Worm and the New Era of CI/CD Exploitation

    date ORKL added it ORKL

    Archived copy on ORKL Details

  4. Weaponizing the Protectors: TeamPCP’s Multi-Stage Supply Chain Attack on Security Infrastructure

    date ORKL added it ORKL

    Archived copy on ORKL Details

  5. KICS GitHub Action Compromised: TeamPCP Strikes Again in Supply Chain Attack

    date ORKL added it ORKL

    Archived copy on ORKL Details

  6. 260702.pdf

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Research, News, and Perspectives

    date ORKL added it ORKL

    Archived copy on ORKL Details

  8. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  9. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  10. Blog: Stay Ahead of Cyber Threats

    date ORKL added it ORKL

    Archived copy on ORKL Details

  11. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  12. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  13. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  14. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  15. Blog: Stay Ahead of Cyber Threats

    date ORKL added it ORKL

    Archived copy on ORKL Details

  16. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  17. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  18. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  19. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  20. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  21. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  22. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  23. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  24. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  25. RL Blog | ReversingLabs

    date ORKL added it ORKL

    Archived copy on ORKL Details

  26. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  27. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  28. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  29. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  30. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  31. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  32. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  33. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  34. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  35. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  36. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  37. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  38. RL Blog | ReversingLabs

    date ORKL added it ORKL

    Archived copy on ORKL Details

  39. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  40. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  41. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  42. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  43. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  44. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  45. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  46. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  47. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  48. Research, News, and Perspectives

    date ORKL added it ORKL

    The original link failed its last check. Original publisher Details

  49. Detecting CI/CD Supply Chain Attacks with Canary Credentials | Tracebit

    Malpedia library date ORKL

    Archived copy on ORKL Details

  50. North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  51. TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM

    Malpedia library date ORKL

    Archived copy on ORKL Details

  52. Tracking & Detecting GhostSocks Malware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  53. Your AI Gateway Was a Backdoor: Inside the LiteLLM Supply Chain Compromise

    Malpedia library date ORKL

    Archived copy on ORKL Details

  54. Threat Assessment: TeamPCP - CanisterWorm & Kubernetes Wiper Campaign

    Malpedia library date ORKL

    Archived copy on ORKL Details

  55. Threat Alert: TeamPCP, An Emerging Force in the Cloud Native and Ransomware Landscape

    Malpedia library date ORKL

    Archived copy on ORKL Details

  56. A deeper look into the threat actor behind the react-native-aria attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  57. RATatouille: A Malicious Recipe Hidden in rand-user-agent (Supply Chain Compromise)

    Malpedia library date ORKL

    Archived copy on ORKL Details

  58. Malware hiding in plain sight: Spying on North Korean Hackers

    Malpedia library date ORKL

    Archived copy on ORKL Details

  59. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  60. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  61. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  62. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  63. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  64. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  65. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  66. Behind the Scenes of the SUNBURST Attack

    Malpedia library date ORKL

    Archived copy on ORKL Details

  67. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  68. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  69. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  70. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  71. Blog: Stay Ahead of Cyber Threats

    Malpedia library date ORKL

    Archived copy on ORKL Details

  72. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  73. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  74. Blog: Stay Ahead of Cyber Threats

    Malpedia library date ORKL

    Archived copy on ORKL Details

  75. Blog: Stay Ahead of Cyber Threats

    Malpedia library date ORKL

    Archived copy on ORKL Details

  76. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  77. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  78. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  79. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  80. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  81. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  82. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  83. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  84. RL Blog | ReversingLabs

    Malpedia library date ORKL

    Archived copy on ORKL Details

  85. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  86. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  87. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  88. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  89. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  90. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  91. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  92. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  93. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  94. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  95. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  96. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  97. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  98. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  99. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  100. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  101. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  102. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  103. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  104. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  105. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  106. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  107. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  108. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  109. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  110. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  111. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  112. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  113. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  114. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  115. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  116. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  117. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  118. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  119. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  120. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  121. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  122. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  123. Research, News, and Perspectives

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

Newest first. Details opens the report in Explore.