Australian Federal Police (AFP), with assistance from the U.S. Federal Bureau of Investigation (FBI), have arrested two individuals in Perth, Australia, identified as alleged masterminds of the cybercrime group TeamPCP. The arrests took place on Wednesday, August 26, 2026.
The AFP named one of the arrested men as Ruben Thomson, aged 21, and the other as Louis Michael Gaebler, aged 23. Both are described by authorities as "principal participants" in the syndicate's activities, receiving cryptocurrency payments for their roles in illegal operations.
Investigations into TeamPCP commenced in April 2026, following information received by Australian authorities and the FBI from multiple cyber threat assessment companies. These reports detailed a syndicate allegedly inserting malicious code into software available on open-source repositories, which was subsequently used by other developers.
TeamPCP is implicated in several supply chain attacks, including the "Shai-Hulud" worm, which targets npm packages. This worm attempts to infect packages, seeks credentials for major public cloud services or platforms like GitHub, and, if successful, either replicates to continue its attacks or wipes the affected environment. Researchers had previously detected a supply chain attack on the open-source scanner Trivy in March 2026, also attributed to the group.
Authorities estimate that TeamPCP's supply chain attacks potentially compromised over 1,000 organizations globally. This activity allegedly led to the theft of more than 500,000 credentials and the exfiltration of at least 300 gigabytes of data. The financial impact, including global remediation costs, is estimated to be in the hundreds of millions of dollars.
The arrests occurred at different locations in Perth's suburbs, and a third property nearby was also searched. Electronic devices and other items were seized by authorities, and a large volume of data is currently undergoing forensic examination. The investigation remains ongoing, with further arrests and charges not ruled out.
