"I thought, damn, you all have been inside this early," Fletcher said.
The undercover analyst gained access to a central server where TeamPCP accumulated stolen credentials harvested from target networks, including account passwords, developer tokens, and administrative credentials intended for use in future extortion demands. Recognizing the immediate risk to thousands of enterprises, Google’s threat intelligence team launched an immediate mitigation strategy.
"My thought was: How can we, as quickly as possible, disrupt their campaign before more compromises can happen?" Larsen said. "Let’s go mess up what they’re doing. That was my goal."
Directly notifying every individual victim company proved impractical given the massive volume of stolen accounts. Instead, Google prioritized contacting major cloud infrastructure and identity service providers, such as Amazon Web Services (AWS) and Microsoft, where the stolen tokens could be utilized. Google issued hundreds of notification alerts to these platform providers, enabling them to proactively revoke compromised credentials, invalidate access tokens, and close attack vectors before TeamPCP could carry out financial extortion.
While monitoring the group’s internal communications, Google’s intelligence team uncovered another significant threat. A core member of TeamPCP was utilizing an artificial intelligence tool to engineer a zero-day exploit targeting widely deployed login software. The exploit was designed to bypass multi-factor authentication (2FA) mechanisms, creating a powerful initial access tool separate from their supply-chain operations.
Google security researchers obtained a copy of the AI-generated exploit code, tested its efficacy in a controlled environment, and confirmed that it functioned as intended with minor adjustments—representing a rare, documented case of an AI-assisted zero-day exploit deployed in the wild. Google quietly alerted the affected software vendor, allowing them to release a patch before the vulnerability could be widely exploited. (Google previously outlined the discovery in a May technical case study without naming TeamPCP or detailing the undercover source).
More betrayals, sloppy opsec
Despite pulling off an unprecedented series of technical intrusions and harvesting credentials for more than 500,000 users, TeamPCP struggled to convert its vast treasure trove of access into illicit revenue. Australian police later confirmed the massive volume of compromised user accounts, but Larsen estimated that TeamPCP earned only tens of thousands of dollars in extortion payouts—a modest sum compared to the multi-million-dollar ransoms routinely secured by established cybercrime syndicates.
To monetize their network access more effectively, TeamPCP sought alliances with other active cybercriminal entities. They invited external hacker groups into their environment, providing them access to stolen corporate credentials in exchange for a percentage of any ransom payments successfully extracted from victims.
Among the groups brought in as revenue partners was ShinyHunters, an established cybercrime syndicate notorious for high-profile extortion schemes, corporate data theft, and ransomware operations—including a high-visibility breach of the Canvas educational platform that impacted thousands of schools across the United States.
The partnership quickly unraveled. By April, roughly a month after joining forces with TeamPCP, ShinyHunters betrayed their partners. ShinyHunters began executing independent extortion demands using TeamPCP’s stolen credential database while refusing to share the proceeds. To further undermine TeamPCP, ShinyHunters contacted Larsen unsolicited and handed over complete chat transcripts from TeamPCP’s operational server—unaware that Google’s undercover analyst was already inside the channel recording the same logs.
ShinyHunters proceeded to publicly taunt TeamPCP on X (formerly Twitter), exposing the rift. Realizing their operational security had been compromised, TeamPCP’s leaders panicked. They locked down their infrastructure, migrated stolen databases to a new isolated server, and conducted a sweep of their communications channels. They purged several members from the CanisterWorm chat, including ShinyHunters and Google’s undercover persona.
"Just delete that and stop sharing shit with shinyhunters," one TeamPCP leader instructed remaining members in an internal message.
