The landscape of modern cybersecurity was fundamentally altered in early 2026 when a brazen, highly coordinated hacker collective known as TeamPCP executed what security experts have since classified as one of the most destructive software supply-chain intrusion campaigns in recorded history. While the digital underground reeled from the fallout of compromised open-source libraries and automated, Dune-themed self-spreading worms, a far more clandestine operation was unfolding behind the scenes. Newly disclosed details from the Google Threat Intelligence Group reveal that an undercover analyst embedded within Mandiant successfully infiltrated TeamPCP’s inner circle nearly from its inception, providing Western intelligence and law enforcement agencies with a front-row seat to an unprecedented cyber onslaught.
The infiltration, spearheaded by Google’s threat research wing, ultimately culminated in late August 2026 with the arrest of two primary suspects in Australia—identified in police statements as Ruben Ian Thomson and Louis Michael Gaebler—following joint operations with the FBI and the Australian Federal Police (AFP). The revelations, presented by Google Threat Intelligence Group researcher Austin Larsen at SentinelOne’s LABScon research conference, expose a complex web of internal betrayal, sloppy operational security (opsec), and a decisive shift toward active digital disruption by major tech conglomerates.
An Unprecedented Supply-Chain Rampage
To understand the magnitude of Google’s inside access, one must first examine the sheer scale of the chaos unleashed by TeamPCP. Emerging onto the cybercrime scene in late 2025, the group quickly transitioned from conventional intrusions to sophisticated software supply-chain attacks. By injecting malicious payloads into widely trusted open-source repositories, the hackers leveraged the inherent trust of the software development ecosystem, hijacking developer credentials and propagating their malware further down the pipeline in a cascading cycle of infections.
Throughout the spring of 2026, TeamPCP’s campaign systematically targeted foundational pillars of the global tech infrastructure. Compromised assets included the open-source security scanner Trivy, the AI application programming interface tool LiteLLM, infrastructure belonging to web application security firm Checkmarx, the web app library TanStack, and enterprise AI platform Mistral AI. Each successful breach widened the group’s net, eventually enabling them to compromise code repositories on GitHub, data contracting firm Mercor, and corporate environments at OpenAI and the European Commission, alongside numerous undisclosed corporate entities.
Compounding the threat was the deployment of an automated, self-spreading worm dubbed "Mini Shai-Hulud"—a nod to the massive sandworms of Frank Herbert’s Dune. This worm automated the process of locating, infecting, and exfiltrating data across software packages, allowing the collective to scale its operations far beyond the manual capabilities of a traditional hacker cell. According to estimates by law enforcement and threat intelligence analysts, the group managed to harvest credentials belonging to more than half a million users.
The Inside Man: How Mandiant Breached the Inner Circle
While the cybersecurity community scrambled to patch systems and issue advisories against the cascading infections, Google’s threat intelligence apparatus was already operating deep inside the adversary’s stronghold.
According to Larsen, an undercover analyst operating under a carefully cultivated persona spent months building trust with a cybercriminal actor who was ultimately invited to join TeamPCP. By March 2026—just as the group’s supply-chain spree was shifting into high gear—the Mandiant operative was granted access to the group’s core communication channel, an exclusive chat server named CanisterWorm, which restricted its membership to roughly a dozen key individuals.
"One of our personas had been working for many months to build trust with one of the actors that was invited to join TeamPCP, and so was added to the group," Larsen explained during briefings ahead of his conference presentation. "So essentially, almost day one, Mandiant was watching everything behind the scenes."
This unprecedented vantage point allowed Google to monitor the hackers’ strategic objectives in real time. In one leaked chat log surface during the investigation, a TeamPCP member boasted, "You guys should understand that we pulled off the biggest supply chain maybe ever recorded in modern history."
Real-Time Disruption and AI Exploitation Countermeasures
Armed with continuous visibility into the CanisterWorm chat and access to the server where TeamPCP stored its massive repository of stolen corporate credentials, Google faced a tactical dilemma: passively observe to gather intelligence or actively intervene to protect potential victims. Opting for a proactive posture that aligned with Google’s newly minted Cyber Disruption Unit, Larsen and his team chose intervention.
Recognizing that directly notifying the hundreds of individual victimized companies would take too much time and potentially tip off the hackers, Google adopted a triage approach. The threat intelligence team contacted major cloud infrastructure and service providers—most notably Amazon Web Services and Microsoft—where the stolen credentials were most likely to be leveraged. By swiftly facilitating the revocation of those compromised access tokens, Google effectively neutralized the utility of the stolen data before large-scale extortion could take place.
Furthermore, Google’s internal visibility uncovered a chilling development: members of TeamPCP were experimenting with artificial intelligence tools to engineer zero-day exploits. Specifically, the hackers utilized AI to draft exploit code capable of bypassing two-factor authentication (2FA) in a widely deployed login software suite. Google’s analysts managed to acquire a copy of the AI-generated code, verified its efficacy through controlled testing, and promptly alerted the affected software vendor, allowing a patch to be deployed before the exploit could be weaponized in the wild. This incident was previously highlighted in a Google Cloud threat brief in May 2026, though the involvement of TeamPCP was kept under wraps until now.
Internal Betrayal and the Downfall of TeamPCP
Despite amassing over half a million credentials, TeamPCP struggled to monetize its harvest effectively, pulling in only tens of thousands of dollars in extortion payments—a fraction of the millions typically generated by ransomware syndicates of similar magnitude. In an effort to boost revenues, the group initiated partnerships with other cybercriminal organizations, granting them access to the stolen credential database in exchange for a percentage of any successful extortions.
Among these partners was ShinyHunters, a notorious and prolific hacker collective responsible for high-profile extortion campaigns, including the massive breach of educational software provider Canvas that disrupted schools across the United States.
The partnership proved disastrous for TeamPCP. In April 2026, ShinyHunters effectively went rogue, executing extortion schemes using TeamPCP’s stolen data while cutting the supply-chain hackers out of the financial arrangement. In a brazen display of double-crossing, ShinyHunters proactively shared a complete log of TeamPCP’s internal chat server with Google’s Austin Larsen—completely unaware that Google already maintained an active mole inside the very same channel.
The fallout from ShinyHunters’ public taunts on social media platform X caused severe paranoia within TeamPCP. Realizing their security had been compromised, the group’s leadership purged their roster, exiling ShinyHunters, several peripheral members, and Google’s undercover analyst from the CanisterWorm chat, while migrating their illicit assets to a new server hosted by an alternative provider.
Sloppy Opsec and the Trail to Arrest
Even after losing direct chat access, Google’s intelligence-gathering operation relied on foundational digital forensics and traditional open-source intelligence (OSINT) to map the real-world identities behind the keyboard.
Larsen traced the digital footprint of a primary chatter in the CanisterWorm channel by cross-referencing leaked user databases from the defunct cybercrime forum BreachForums. The handle was linked to the Gmail address [email protected]. Digging deeper into historical forum archives, Larsen uncovered a 2019 commercial dispute between the user "sheepstealing" and a vendor of pirated Microsoft Office keys, where the user requested a refund via a PayPal account associated with the email address [email protected].
Concurrently, through what Larsen described as a "trusted partner," Google gained insight into TeamPCP’s migration to a new server. Astoundingly, the group’s operational security failures continued: the illicit data trove was being actively backed up to a Google Drive account tied directly to the same [email protected] address.
"When we saw that, I just thought: There’s no way. Why would he be sending all of this illicit, stolen material to a Google Drive that’s tied to himself?" Larsen remarked.
Armed with this definitive link, Google immediately escalated the intelligence package to the FBI. Following a rapid legal process involving formal data requests and warrants, US authorities coordinated with international partners. In late August 2026, Australian Federal Police executed raids in suburban areas, arresting Ruben Ian Thomson and Louis Michael Gaebler. Video footage released by law enforcement captured the suspects being taken into custody.
The Broader Implications for Cyber Defense
The takedown of TeamPCP marks a significant watershed moment in the intersection of private-sector threat intelligence and global law enforcement. Historically, security firms operated primarily in a defensive capacity—monitoring threats, publishing after-action reports, and advising clients on remediation.
The proactive posture demonstrated by Google’s Threat Intelligence Group and its Cyber Disruption Unit signals a paradigm shift. By embedding operatives within criminal forums, leveraging inter-gang rivalries, and actively preempting extortion and exploitation campaigns, tech giants are increasingly taking the fight directly to the adversaries.
As cybercrime syndicates continue to leverage advanced automation, software supply-chain vectors, and generative artificial intelligence, the TeamPCP case serves as both a cautionary tale for threat actors regarding the fragility of operational security and a proof-of-concept for the disruptive potential of deep-cover corporate infiltration.
