Loading threat actor…
ALTERED SPIDER, also known as TeamPCP, is a financially motivated cybercriminal group conducting software supply-chain attacks against developer tooling and cloud environments. Its targeting includes developers' AI tools, with compromised software dependencies providing access to downstream development environments. In one campaign, the group compromised more than 300 software dependencies in a single day. The group harvests credentials and secrets from compromised environments and uses them to pivot into cloud infrastructure for theft and extortion. Its operations combine large-scale dependency compromise with credential theft and subsequent cloud access, extending the impact of an initial software supply-chain intrusion into connected infrastructure.
Who, where, and from where this actor operates. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
5 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt.
3 malware families Mallory has associated with this actor across public reporting.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.