Warning Over “Industrialized” Cyber-Attacks After Ransomware Gang Partners With TeamPCP

Sophos reported that TeamPCP — a group stealing developer credentials and cloud tokens via supply-chain compromises — has partnered with the Vect ransomware group, creating an “industrialized ransomware” model; TeamPCP’s March 2026 compromise of Aqua Security’s Trivy allegedly exposed ~10,000 CI/CD workflows and over 500,000 credentials, and the FBI issued a FLASH warning about TeamPCP’s activity and associated malware families, while researchers confirmed at least one Vect ransomware deployment using TeamPCP-sourced credentials.