Alleged TeamPCP Hackers Charged in Australia

The Australian Federal Police (AFP) has charged two Western Australian men, Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, with a total of 14 offenses for their alleged involvement in the cybercrime group TeamPCP. These charges stem from TeamPCP's role in significant supply chain attacks that compromised open-source security tools and an AI gateway in March 2026. The group is accused of exploiting vulnerabilities in Trivy, a popular open-source vulnerability scanner for containerized applications, and Checkmarx KICS, a tool designed to detect security vulnerabilities in infrastructure as code. Additionally, TeamPCP allegedly targeted LiteLLM, an open-source application designed to simplify the process of using large language models by providing a unified API for various AI providers. The arrests and charges represent a significant law enforcement action against a group implicated in sophisticated cyber intrusions that could have far-reaching consequences for software development and AI deployment. Gaebler and Thomson appeared in Perth Magistrates Court on August 27, where the charges were formally presented. The AFP's investigation into TeamPCP has been ongoing, focusing on identifying and apprehending individuals responsible for orchestrating and executing these complex cyberattacks. Supply chain attacks, such as those attributed to TeamPCP, are particularly concerning because they leverage trusted software components to infiltrate downstream systems, potentially affecting a vast number of users and organizations. The compromise of security scanners like Trivy and Checkmarx KICS could allow attackers to bypass detection mechanisms or introduce malicious code into software development pipelines. Similarly, the targeting of an AI gateway like LiteLLM highlights the growing threat landscape surrounding artificial intelligence infrastructure. The AFP's success in bringing these charges underscores the importance of international cooperation and dedicated cybercrime units in combating transnational cyber threats. The investigation is expected to continue, with authorities seeking to uncover the full extent of TeamPCP's operations and any other individuals involved. The legal proceedings against Gaebler and Thomson will likely involve detailed examination of digital evidence and the technical methods employed in the alleged attacks. This development serves as a stark reminder of the persistent and evolving nature of cyber threats targeting critical software infrastructure and emerging technologies like AI.