Back Cybersecuritynews

TeamPCP Industrializes Cloud Misconfigurations Into a Self

Cybersecuritynews •Tushar Subhra Dutta • February 10, 2026

TeamPCP, also known as PCPcat, ShellForce, and DeadCatx3, emerged in December 2025 as a sophisticated cloud-native threat actor targeting exposed Docker APIs, Kubernetes clusters, Ray dashboards, Redis servers, and React2Shell vulnerabilities. The group launched a massive campaign designed to build a distributed proxy and scanning infrastructure at scale, then compromise servers to exfiltrate data, deploy […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

TeamPCP Exploits Cloud Misconfigurations for Large-Scale Attacks TeamPCP, a cloud-native threat actor that emerged in December 2025, is targeting misconfigured cloud services such as Docker APIs and Kubernetes clusters. The group is building a distributed proxy and scanning infrastructure to compromise servers, exfiltrate data, and deploy malicious payloads. 3 sources 27

Extracted Entities

TeamPCP Industrializes Cloud Misconfigurations Into a Self

The full story

Extracted Entities

APT Groups (3)

Attack Types (1)

Malware (2)

MITRE ATT&CK (1)

Platforms (2)

Tools (2)