Cybersecurity Investigation Identifies Ruben Thompson as Team PCP Leader Through Digital Footprint Analysis

A cybersecurity investigation has traced multiple digital identities back to an individual named Ruben Thompson, believed to be the leader of Team PCP. The investigation connected a HackerOne account containing Thompson's real name to the handle "deadcat X3," which was then linked to a Hugging Face domain hosting a command and control (C2) domain used in the MiniShyude attack. The same individual was found bragging about cybercrime activities on Telegram. Thompson's real name also led investigators to a TikTok account where he uploaded a video showing a Steam account that was banned on the same day these connections were established. The matching profile pictures across multiple platforms provided definitive confirmation of the individual's identity as the Team PCP leader.