Your online data might be less safe than you think, thanks to a group that’s been quietly lurking in the digital shadows for years.
Cybersecurity researchers have recently shined a light on a hacking group called TeamPCP. It turns out this team has been active since at least 2020, quietly breaking into internet-connected systems. This discovery means they’ve been at this game for a while, even before they started focusing on a more sophisticated kind of attack called a “supply chain campaign.”
Think of a supply chain campaign like this: instead of breaking into your house directly, a thief (TeamPCP) breaks into the factory that makes your door locks (a software vendor). If they can tamper with the locks before they even get to your house, then everyone who buys a lock from that factory is at risk. That’s essentially what TeamPCP started doing with software, trying to infect programs before they even reach users.
What the researchers found is that TeamPCP used many of the same digital fingerprints in their earlier attacks as they did in their later, more complex ones. We’re talking about things like the specific internet addresses they used [domains], the ways they snuck malicious software onto computers [malware deployment paths], how they set up their attacks [staging techniques], and even the hidden computer systems they used to run their operations [backend infrastructure]. These overlapping details were like finding the same person’s fingerprints and distinctive tools at different crime scenes, strongly linking TeamPCP to all these incidents.
Why does this matter to you? Well, many websites and online services use a database technology called Redis to quickly access information. TeamPCP was specifically targeting these Redis systems, which could potentially expose a lot of user data if they succeeded. Knowing they’ve been active for so long, and using consistent methods, helps security experts better understand their tactics and build stronger defenses.
This revelation about TeamPCP’s long-standing activity highlights a common theme in cybersecurity: threats often evolve from simpler attacks to more sophisticated ones. It’s a good reminder that if you manage any online services or websites, regularly patching [updating] your systems, especially databases like Redis, is crucial. If you don't keep your software up-to-date, you're leaving open doors for groups like TeamPCP.
TeamPCP’s long history of attacks underscores the constant need for vigilance and strong digital defenses.