Stories

A specially designed Google logo, during the opening of Google's new Artificial Intelligence (AI) centre in Berlin, Germany. Photo: File/Reuters
F
Firstpost•20-09-2026, 21:00
Google Infiltrates Notorious Hacking Gang TeamPCP with Undercover Analyst
  • •Google's Threat Intelligence team successfully infiltrated the TeamPCP hacking group using an undercover researcher, monitoring their activities and disrupting exploitation attempts.
  • •Undercover researcher Austin Larsen tracked operational security lapses, leading to the identification of key members and sharing details with law enforcement.
  • •Google gained access to a server containing stolen credentials, including usernames, passwords, and access tokens, which were used to warn victims.
  • •The infiltration revealed TeamPCP's use of AI to develop a zero-day exploit targeting login software, capable of bypassing two-factor authentication, which Google quickly neutralized.
  • •Intelligence from the cybercriminal group ShinyHunters, a former TeamPCP partner, also aided Google's efforts, leading to the arrest of a key hacker by Australian police.

Key Questions Answered

Google's Threat Intelligence team infiltrated TeamPCP when an undercover researcher gained access to a server where the group stored stolen credentials, allowing Google to monitor activities, warn potential victims, and disrupt exploit attempts.

ShinyHunters, an infamous cybercriminal group that had previously partnered with TeamPCP before turning on them, provided key intelligence to Google during the investigation.

Investigator Austin Larsen followed operational security lapses to link an alleged hacker to a Gmail account and discovered that stolen credentials were being backed up to an associated Google Drive, leading to information being passed to the FBI and subsequent arrests by Australian police.

Report: Google's Undercover Analyst Infiltrates Notorious Hacking Gang