An undercover Google analyst infiltrated a notorious supply-chain hacking gang

Google’s threat intelligence team infiltrated the TeamPCP supply-chain hacking gang, monitoring its operations from inside and warning affected companies. The infiltration enabled Google to track operational security mistakes of two Australian suspects, share identifying details with law enforcement, and receive intelligence from the rival group ShinyHunters, which later betrayed TeamPCP. Mandiant’s undercover analyst joined the group’s inner circle early in the campaign, helping disrupt further attacks.