TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

A new analysis reveals threat actor TeamPCP has been active since 2020, compromising internet-facing infrastructure before targeting the software supply chain. The connection is supported by overlapping domains, malware deployment paths, staging techniques, and backend infrastructure, indicating a long-running campaign against Redis systems and later supply chain attacks.