FBI Issues Alert on TeamPCP Cybercriminal Group Exploiting Developer Tools to Steal Cloud Credentials

The FBI issued a FLASH alert on July 2, 2026, identifying the cybercriminal group TeamPCP as responsible for compromising widely used developer and security tools to steal cloud credentials at scale. The group employed tactics such as poisoning trusted tools and distributing malware through software updates to infiltrate victim environments. The primary objective included credential theft and extortion of targeted organizations. No specific technical details, such as affected tools, malware names, or CVE IDs, were disclosed in the available content. The alert highlights the group’s focus on exploiting trusted development pipelines for large-scale attacks.