Back Feeds.4Sysops

Industrialized ransomware alliance targets software supply chains and developers

Feeds.4Sysops •IT News • July 3, 2026

The Vect ransomware group and the TeamPCP cybercriminal collective have formed a strategic partnership to industrialize the deployment of ransomware. This collaboration combines TeamPCP’s large-scale credential harvesting from software supply chains with Vect’s established ransomware-as-a-service infrastructure. Security researchers warn that this business-like model significantly lowers the barrier to entry for cybercriminals by automating complex attack pipelines. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vect and TeamPCP Form Alliance for Ransomware Operations In late March 2026, the Vect ransomware group partnered with TeamPCP, a credential theft specialist, to enhance their cybercriminal operations. This collaboration aims to leverage TeamPCP's extensive credential harvesting capabilities alongside Vect's ransomware deployment infrastructure, targeting organizations through supply chain attacks. TeamPCP gained notoriety for exploiting the React2Shell vulnerability (CVE-2025-55182) and has been linked to significant breaches, including a compromise of Aqua Security's Trivy scanner, affecting over 10,000 CI/CD workflows and stealing more than 500,000 login credentials. The partnership marks a notable shift in the ransomware landscape, as it allows for a more industrialized approach to cybercrime, increasing the risk for organizations with compromised credentials. The FBI has issued warnings regarding TeamPCP's activities, highlighting their history of large-scale software supply chain compromises. 6 sources 70

Extracted Entities

Industrialized ransomware alliance targets software supply chains and developers

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (1)

Ransomware Groups (1)