CipherForce is the proprietary ransomware operation of TeamPCP, a financially motivated cybercrime collective first observed in late 2025. This group officially emerged around February 2026, distinguishing itself through a dual-track monetization model that includes its own ransomware campaigns and partnerships with other ransomware-as-a-service groups like Vect. TeamPCP, which operates CipherForce, is notable for pioneering sophisticated supply chain attacks, particularly targeting open-source security tooling and continuous integration/continuous deployment (CI/CD) pipelines to harvest credentials at scale. The collective describes itself as a loose-knit group of individuals who couldn't find conventional employment, operating under multiple aliases including PCPcat, ShellForce, DeadCatx3, and Persy_PCP, and is tracked by Google's Threat Intelligence Group as UNC6780. Their unique approach involves weaponizing security tools to gain initial access, feeding a broader credential moneti

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker