G1056 TeamPCP
Enterpriseauch bekannt alsTeamPCP · PCPCat · ShellForce · DeadCatx3 · SHADOW-WATER-058 · UNC6780
TeamPCP is a financially-motivated, cloud-native threat group that has been active since at least September 2025. Initially focused on ransomware and cryptocurrency theft, TeamPCP shifted in early 2026 to systematic, worm-driven credential theft and software supply chain attacks targeting Continuous Integration and Continuous Delivery (CI/CD) workflows. TeamPCP has monetized access through extortion and through partnerships with ransomware actors including Vect and CipherForce.
01
kanonischer Akteur
Die Gruppe, der dies zugeschrieben wird.
02
genutzte Techniken (37)
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
20 von 37 angezeigt
03
genutzte Software (3)
Zugehörige Malware und Tools.
04
Quelle
Wo diese Definition veröffentlicht ist.