TeamPCP
TeamPCP is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 9 sectors, including Government and Technology, in 11 countries, including the United States and Canada. It uses 161 MITRE ATT&CK techniques and exploits 7 known CVEs.
Also known as
- UNC6780
- DeadCatx3
- PCPcat
- ShellForce
- PersyPCP
- CipherForce
- Techniques
- 161
- Exploited CVEs
- 7
- First seen
- Jan 25, 2025
- Last seen
- May 20, 2026
- Record updated
Who They Target.
Sectors · 9
Labelsaccess-brokerci-cdcloud-nativecloud-native attackssupply chain attackssupply-chain-attack
About TeamPCP.
A threat group known for deploying the 'TeamPCP Cloud Stealer' information-stealing malware. They demonstrate a persistent focus on developer platforms (GitHub, PyPI, NPM, Docker) to gain access to internal corporate build environments and conduct supply chain attacks.
Last updated Oct 14, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.