TeamPCP Uses Stolen Credentials to Target AWS Environments, Wiz Reports
Summary
Wiz reports that TeamPCP used credentials stolen in its open-source supply-chain campaign to enumerate compromised AWS environments and exfiltrate source code, secrets and data from S3, Secrets Manager and databases.
Key points
- Wiz reports that TeamPCP used stolen AWS keys, Azure application secrets and SaaS tokens after checking whether they were still valid with TruffleHog.
- The group reportedly enumerated AWS services, focusing on containers, clusters, task definitions and victims’ Secrets Manager resources.
- According to Wiz, attackers used GitHub workflows and AWS ECS Exec to run code, Bash commands and Python scripts in victim environments.
- Wiz says the activity included theft of source code, configuration files and embedded secrets from GitHub repositories, along with bulk data from S3 buckets, Secrets Manager and databases.
- Researchers estimate that tens of thousands of repositories were likely affected by the broader campaign, which followed compromises involving Trivy, NPM, PyPI and OpenVSX.
- AWS recommends temporary credentials such as IAM roles instead of long-term access keys.
Article Details
- Event Type
- A reported campaign by TeamPCP expanded from open-source software supply-chain attacks to compromised AWS environments.
- Impact
- Wiz reports that TeamPCP used compromised credentials to access AWS environments, enumerate services and containers, and exfiltrate data from code repositories and cloud resources. The campaign also compromised developer tokens and led to malware being injected into Telnyx PyPI packages. Researchers estimate tens of thousands of repositories were likely affected. The article says Lapsus$ and Vect may be working with TeamPCP, but those links are presented as suspicions and claims, not confirmed partnerships.
MITRE ATT&CK
T1059.004 · Unix ShellThe article says the attackers used ECS Exec to execute Bash commands in containers.T1059.006 · PythonThe article says the attackers used ECS Exec to run Python scripts in containers.T1078.004 · Cloud AccountsThe article reports that TeamPCP used compromised AWS access keys to access victim AWS environments.T1526 · Cloud Service DiscoveryAfter access was validated, TeamPCP reportedly enumerated services in compromised AWS environments and mapped clusters and task definitions.T1530 · Data from Cloud StorageWiz reports that TeamPCP accessed S3 buckets for bulk data exfiltration from AWS environments.
People
Threat Actors
LAPSUS$The article describes Lapsus$ as a suspected potential partner of TeamPCP, citing its reported boasts about future TeamPCP operations; the partnership is not confirmed.TeamPCPThe article attributes the open-source supply-chain campaign and subsequent access to compromised AWS environments and data exfiltration to TeamPCP.Vect Ransomware GroupThe article describes Vect as a suspected potential partner of TeamPCP, based on Vect’s claimed partnership on a hacking forum; the claim is not confirmed.
Vendors
Amazon Web Servicescampaign targeting the open source software community has been using compromised credentials to access AWS environments and exfiltrate more data, cybersecurity firm Wiz reports.Aqua SecurityTeamPCP made headlines over the past two weeks, after hacking Aqua Security’s Trivy vulnerability scanner as part of a campaign that has since expanded to NPM, PyPI, and OpenVSX.TelnyxLiteLLM has over 90 million monthly downloads, and its compromise had a massive blast radius. Among others, it exposed a Telnyx PyPI token that led to Telnyx’s PyPI packages being injected with malware.Wizbeen using compromised credentials to access AWS environments and exfiltrate more data, cybersecurity firm Wiz reports.
Products
ECS ExecThe hackers relied on GitHub workflows to execute code within victim environments, and used the ECS Exec feature to execute Bash commands and Python scripts directly on containers running in AWS environments.GitHub ActionsThe malware injected in Trivy packages and GitHub Actions was executed when Trivy ran in downstream pipelines, allowing TeamPCP to compromise publish tokens of NPM developers, as well as a PyPI token belonging toLiteLLMallowing TeamPCP to compromise publish tokens of NPM developers, as well as a PyPI token belonging to LiteLLM co-founder and CEO Krrish Dholakia.npmTeamPCP made headlines over the past two weeks, after hacking Aqua Security’s Trivy vulnerability scanner as part of a campaign that has since expanded to NPM, PyPI, and OpenVSX.OpenVSXTeamPCP made headlines over the past two weeks, after hacking Aqua Security’s Trivy vulnerability scanner as part of a campaign that has since expanded to NPM, PyPI, and OpenVSX.PyPITeamPCP made headlines over the past two weeks, after hacking Aqua Security’s Trivy vulnerability scanner as part of a campaign that has since expanded to NPM, PyPI, and OpenVSX.S3it stole source code, configuration files, and embedded secrets from GitHub repositories, TeamPCP accessed S3 buckets, Secrets Manager, and databases for bulk data exfiltration from AWS environments, the cybersecurityTrivyTeamPCP made headlines over the past two weeks, after hacking Aqua Security’s Trivy vulnerability scanner as part of a campaign that has since expanded to NPM, PyPI, and OpenVSX.