Google researcher secretly tracked a major supply-chain hacking group

Google's threat intelligence unit revealed that one of its analysts managed to embed themselves within the inner circle of TeamPCP, a hacking group known for supply-chain attacks that compromise software before it reaches end users.

The undercover effort reportedly gave Google researchers rare visibility into the group's methods and communications, helping the company understand how the hackers operate and target victims through compromised software components.

Google has not disclosed extensive details about how the infiltration was carried out or what specific vulnerabilities were uncovered, but the disclosure highlights ongoing efforts by major tech firms to monitor and disrupt cybercrime networks targeting software supply chains.