PCPcat Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
December 15, 2025
Last Seen
July 2, 2026

Related Threat Clusters

  • Vect and TeamPCP Form Alliance for Ransomware Operations

    In late March 2026, the Vect ransomware group partnered with TeamPCP, a credential theft specialist, to enhance their cybercriminal operations. This collaboration aims to leverage TeamPCP's extensive credential…

    8 articles · Updated July 2, 2026
  • Operation PCPcat Compromises Over 59,000 Next.js/React Servers

    Operation PCPcat has compromised 59,128 Next.js and React servers in under 48 hours, exploiting critical vulnerabilities CVE-2025-29927 and CVE-2025-66478. The attackers utilized prototype pollution in JSON payloads to…

    3 articles · Updated December 24, 2025
  • PCPcat Malware Compromises Over 59,000 Servers via React2Shell Exploit

    The PCPcat malware campaign has compromised more than 59,000 servers in under 48 hours by exploiting critical vulnerabilities in .js and React frameworks. It specifically targets vulnerabilities CVE-2025-29927 and…

    2 articles · Updated December 15, 2025
  • TeamPCP Exploits Cloud Misconfigurations for Large-Scale Attacks

    TeamPCP, a cloud-native threat actor that emerged in December 2025, is targeting misconfigured cloud services such as Docker APIs and Kubernetes clusters. The group is building a distributed proxy and scanning…

    3 articles · Updated February 10, 2026

Recent Intelligence Reports

  • Weekly Threat Bulletin February 11th 2026 — www.f5.com · July 2, 2026
  • TeamPCP Industrializes Cloud Misconfigurations Into a Self — Cybersecuritynews · February 10, 2026
  • Operation PCPcat Hacked 59,000+ Next.js/React Servers Within 48 Hours — Cybersecuritynews · December 24, 2025
  • New PCPcat Exploiting React2Shell Vulnerability to compromise 59,000+ Servers — Cybersecuritynews · December 15, 2025
  • PCPcat Malware Leverages React2Shell Vulnerability to Breach 59,000+ Servers — Gbhackers · December 15, 2025

CVSS v3.1 Breakdown