TeamPCP Industrializes Cloud Misconfigurations Into a Self-Propagating Cybercrime Platform

**TeamPCP cloud-native campaign (Dec 2025):** A large-scale criminal campaign exploited exposed Docker APIs, Kubernetes, Ray dashboards, Redis, and React2Shell to deploy self-propagating malicious containers that converted compromised cloud hosts (predominantly Azure and AWS) into persistent scanning/proxy/cryptomining/ransomware nodes; investigators observed 185 compromised servers with clear C2 indicators and public data leaks.