TeamPCP
PCPCatShellForceDeadCatx3SHADOW-WATER-058UNC6780
UnattributedNo public state or group attribution on record
TeamPCP is a financially-motivated, cloud-native threat group that has been active since at least September 2025. Initially focused on ransomware and cryptocurrency theft, TeamPCP shifted in early 2026 to systematic, worm-driven credential theft and software supply chain attacks targeting Continuous Integration and Continuous Delivery (CI/CD) workflows.
MITRE ATT&CK Techniques
Associated Malware
CanisterWormMini Shai-HuludTeamPCP Cloud Stealer
No recent coverage in the current feed. This actor may be quiet, or reporting hasn't used a matched alias.