Google put an undercover analyst inside TeamPCP, the group behind the worst supply-chain hacking spree on record
The analyst spent months building trust before joining the group's inner chat in March 2026, giving Google a live view of cascading attacks on more than 1,000 companies. It also accessed a server holding over half a million stolen credentials and sent hundreds of alerts to providers including AWS and Microsoft to revoke them.
2 min read