TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

TeamPCP, a threat actor, has been found to have been active since at least 2020, initially targeting internet-facing infrastructure. The group's early activities included compromising Redis systems, and they later shifted focus to supply chain attacks. Analysis revealed connections between the group's early and later activities through shared domains, malware deployment methods, and backend infrastructure. This indicates that TeamPCP has been operating for years, evolving their tactics over time. The discovery provides insight into the group's history and progression of their attacks. TeamPCP's activities have spanned multiple years, with their focus expanding to include supply chain campaigns.