Google’s threat intelligence team disclosed that an internal researcher operated undercover within the hacking collective TeamPCP during the group’s extensive supply-chain attack campaign. The operation, detailed at SentinelOne’s LABScon conference by researcher Austin Larsen, allowed Google to observe the group’s activities in real time, issue warnings to potential victims and disrupt ongoing exploitation attempts. Larsen explained that the researcher gained access to a core communication channel used by TeamPCP, referred to as CanisterWorm, and monitored the group’s coordination without participating in malicious activity.
The investigation coincided with the arrest of two Australian suspects, identified as Ruben Ian Thomson and Louis Michael Gaebler, who were charged in connection with TeamPCP’s operations. According to Australian Federal Police, the pair were described as “principal participants” in the group. Charges stemmed from a joint investigation involving the FBI and local authorities, though specific details of the alleged conduct have not been publicly elaborated.
TeamPCP’s activities involved compromising widely used open-source tools, including Trivy, LiteLLM, TanStack and Mistral AI, to distribute malware and harvest credentials from thousands of victims. The group’s tactics included deploying a self-propagating worm named Mini Shai-Hulud, inspired by the Dune series, to automate infection spread. These efforts led to breaches at GitHub, Mercor and OpenAI, among other organizations.
Google’s undercover presence within TeamPCP originated through a collaboration with Mandiant, which had previously placed an analyst in the group’s inner circle. Larsen noted that this access was established prior to the recent arrests and allowed the company to track the group’s movements from within. The researcher’s role remained observational, with no involvement in hacking activities, according to Larsen.
A key breakthrough occurred when Google identified operational missteps by TeamPCP members, including the reuse of email addresses and infrastructure tied to one of the suspects. Investigators traced a Gmail account linked to a TeamPCP member to a separate forum where a user with a similar handle had previously engaged in disputes over software licenses. This led to the discovery of a Google Drive account associated with the same individual, which contained backups of stolen credentials.
Based on this evidence, Google provided information to law enforcement, contributing to the identification and arrest of Thomson. The FBI and AFP have not released detailed statements on the case, citing ongoing investigations.
In addition to internal monitoring, Google used its access to TeamPCP’s communications to detect attempts to develop a zero-day exploit targeting a widely used authentication system. The exploit, reportedly generated using artificial intelligence, was tested and refined by Google’s team before being shared with the affected software vendor for patching.
The group’s partnership with ShinyHunters, another cybercriminal organization, ultimately collapsed when the latter began using TeamPCP’s stolen data for independent extortion efforts without sharing proceeds. ShinyHunters later leaked internal TeamPCP chat logs, unaware that Google already had access through its embedded researcher.
Following internal discussions, TeamPCP restricted access to its communications and exiled several members, including the undercover analyst. Larsen emphasized that Google’s approach prioritized disruption over public exposure, focusing on neutralizing threats before they could compromise additional systems.
The operation reflects a broader shift within Google’s security teams toward proactive threat mitigation. Larsen noted that the company’s newly established Cyber Disruption Unit has redirected resources toward interrupting active campaigns, rather than solely publishing analytical reports.
This account is based on public statements from Google researchers, law enforcement disclosures and technical documentation released by the company. No unverified claims about individuals or organizations have been included. The investigation remains subject to legal processes in multiple jurisdictions.