April

Read

United

<p class="is-style-lead">Australian authorities charged two Western Australian men on Aug. 26 following a joint investigation into the alleged TeamPCP cybercrime syndicate.</p><div id="cn-block-summary-block_f2cc3c584bb02c2067b8917bb2171a46" class="cn-block-summary"><div class="cn-block-summary__nav tabs"><span class="tabs__item is-selected">Summary</span></div><div class="cn-block-summary__content"><ul class="wp-block-list"><li>Australian police charged two Western Australian men with fourteen offences following the TeamPCP cybercrime investigation.</li><li>Authorities estimate malicious software potentially compromised over 1,000 organizations and exposed more than 500,000 credentials.</li><li>Investigators allege the syndicate stole at least 300 gigabytes of data from downstream software customers.</li><li>U.S. prosecutors separately indicted Thomson on federal computer crime charges carrying maximum five-year prison terms.</li><li>Police said cryptocurrency payments remain under investigation and disclosed no seizure value or laundering total.</li></ul></div></div><p>The Australian Federal Police filed a combined 14 charges against 21-year-old Ruben Ian Thomson and 23-year-old Louis Michael Gaebler. Both appeared before Perth Magistrates Court on Aug. 27, according to <a href="https://www.abc.net.au/news/2026-08-27/two-wa-men-charged-after-investigation-into-alleged-cybercrime/107084796?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">ABC</a>.</p><p>The operation involved the AFP, the FBI and the Western Australia Police Force. Authorities executed warrants at properties in Cottesloe, Hamilton Hill and Mandurah.</p><p>Police allege the group compromised more than 1,000 organizations, obtained over 500,000 credentials and removed at least 300 gigabytes of data. The defendants have not been convicted, and the charges remain allegations.</p><figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x"><div class="wp-block-embed__wrapper"><blockquote class="twitter-tweet"><p>A joint <a rel="noopener noreferrer nofollow" href="https://x.com/FBI?ref_src=twsrc%5Etfw">@FBI</a>, <a rel="noopener noreferrer nofollow" href="https://x.com/AusFedPolice?ref_src=twsrc%5Etfw">@AusFedPolice</a> and <a rel="noopener noreferrer nofollow" href="https://x.com/WA_Police?ref_src=twsrc%5Etfw">@WA_Police</a> investigation has led to the arrest of two Western Australian men charged with allegedly hiding malicious code in open-source software, harvesting 500,000+ credentials and compromising 1,000+ organizations worldwide. A powerful example…</p>— U.S. Embassy Australia (@USEmbAustralia) <a rel="noopener noreferrer nofollow" href="https://x.com/USEmbAustralia/status/2094314044929036653?ref_src=twsrc%5Etfw">August 31, 2026</a></blockquote></div></figure><p>You might also like: <a href="https://crypto.news/coldcard-theft-fbi-may-know-1082-btc-attacker/" rel="noopener noreferrer nofollow"> Coldcard theft: FBI may know 1,082 BTC attacker </a></p><h2 class="wp-block-heading" id="strong-teampcp-allegedly-targeted-trusted-software-components-strong"><strong>TeamPCP allegedly targeted trusted software components</strong></h2><p>The joint investigation began in April after several cybersecurity companies supplied intelligence about malicious software distributed through an open-source repository, the AFP said in its official <a href="https://www.afp.gov.au/news-centre/media-release/two-wa-men-charged-following-afp-fbi-wapf-disruption-alleged-global" rel="noopener noreferrer nofollow">release</a>.</p><p>Investigators allege TeamPCP inserted malicious code into legitimate software components used by other developers. Once incorporated into downstream systems, the modified code allegedly gave the group unauthorized access to organizations across government, academia and the private sector.</p><p>Software supply-chain attacks can spread beyond the organization hosting the original compromised code. A trusted component may be reused by hundreds of developers, allowing one modification to reach many unrelated systems.</p><p>Australian authorities estimated that responding organizations face remediation costs totaling hundreds of millions of dollars. That figure reflects an official estimate rather than a confirmed financial loss suffered by identified victims.</p><p>The AFP said infected software enabled the alleged theft of credentials, authentication materials and other sensitive information. However, authorities have not published a complete list of affected organizations or software packages.</p><h2 class="wp-block-heading" id="strong-cryptocurrency-payments-remain-under-investigation-strong"><strong>Cryptocurrency payments remain under investigation</strong></h2><p>Police allege the two men were principal participants in the operation and received cryptocurrency for their roles. Authorities said the value of those payments remains under investigation.</p><p>The official release did not identify the cryptocurrencies involved. It also did not disclose wallet addresses, transaction hashes, mixers, exchanges or a confirmed laundering total.</p><p>Reports claiming that investigators seized large cryptocurrency balances or expensive property go beyond the details contained in the AFP announcement. Authorities said electronic devices and other items were seized, but they did not assign a digital-asset value to those items.</p><p>Thomson faces one Australian charge of dealing with money or property worth at least 100,000 Australian dollars that authorities allege represented criminal proceeds. The offence carries a maximum prison sentence of 20 years. That threshold describes the charge and does not establish the final amount involved.</p><p>Blockchain transactions can assist investigators when funds move through identifiable services or interact with regulated exchanges. As previously reported, <a href="https://crypto.news/australian-federal-police-seizes-4-5m-in-assets-tied-to-2013-crypto-theft/?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">Australian authorities forfeited nearly 25 Bitcoin and other assets tied to a 2013 exchange theft</a>.</p><h2 class="wp-block-heading" id="strong-u-s-indictment-creates-a-separate-federal-case-strong"><strong>U.S. indictment creates a separate federal case</strong></h2><p>The U.S. Department of Justice separately unsealed a federal indictment against Thomson. Prosecutors charged him with conspiracy to violate the Computer Fraud and Abuse Act and obtaining information from a protected computer.</p><p>The American <a href="https://www.justice.gov/usao-ndca/pr/australian-man-indicted-teampcp-cyberattacks-software-supply-chain?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">indictment</a> concerns alleged TeamPCP attacks during spring 2026. Prosecutors claim malicious code scanned downstream systems, extracted sensitive information and maintained persistent access.</p><p>The Justice Department also alleges TeamPCP used stolen information to make ransom or extortion demands. Members allegedly offered not to publish victims’ data in exchange for payment. These claims have not been proven in court.</p><p>Each U.S. offence carries a maximum five-year prison term and a fine of up to $250,000, or twice the alleged gross gain or victim loss. Any sentence would be determined by a federal judge after a conviction.</p><p>The U.S. announcement names Thomson but does not announce a corresponding American indictment against Gaebler. Thomson remained in Australian custody when prosecutors disclosed the case.</p><p>U.S. agencies have previously targeted infrastructure allegedly used to convert cybercrime proceeds. In related coverage, <a href="https://crypto.news/fbi-seizes-nine-crypto-exchanges-over-money-laundering/?utm_source=chatgpt.com" rel="noopener noreferrer nofollow">the FBI seized nine cryptocurrency exchanges accused of laundering ransomware and investment-fraud proceeds</a>.</p><h2 class="wp-block-heading" id="strong-forensic-examinations-could-produce-further-charges-strong"><strong>Forensic examinations could produce further charges</strong></h2><p>The AFP said investigators are examining a large volume of seized data and electronic devices. That work may help authorities identify additional participants, victims and financial transfers.</p><p>Police have not ruled out further arrests or charges. They have also not announced whether the United States will seek Thomson’s extradition or wait for the Australian proceedings to advance.</p><p>The investigation’s next phase will involve digital forensics and the examination of cryptocurrency payment records. Prosecutors must separately prove each defendant’s identity, role, intent and connection to the alleged activity.</p><p>Potential victims should review software dependencies, rotate exposed credentials and examine authentication logs. Australian organizations can report incidents through <a href="https://www.cyber.gov.au/report-and-recover/report" rel="noopener noreferrer nofollow">Report Cyber</a>, while individuals concerned about identity theft can contact <a href="https://www.idcare.org/" rel="noopener noreferrer nofollow">IDCARE</a>.</p><p>The case produced no verified cryptocurrency market reaction. It concerns the alleged use of digital assets for payments rather than a vulnerability in a blockchain or cryptocurrency protocol.</p><p>Read more: <a href="https://crypto.news/beyond-the-crypto-rally-4-trends-to-watch-this-cycle/" rel="noopener noreferrer nofollow"> Beyond the crypto rally: 4 trends to watch this cycle </a></p>

FBI and Australian police charge two in TeamPCP probe

Table of Contents

crypto.news

Other articles published on Aug 31, 2026

JPMorgan Crypto Team: Chase Builds Digital Assets Unit

Shiba Inu Price Prediction: Can $SHIB Explode After 873% Burn Spike?

Bitcoin holds $78K as U.S.–Iran clash lifts oil

SK Hynix (SKHY) Explores Japanese Manufacturing Partnership to Boost Memory Chip Production

Zcash Toolkit Cuts Private Transaction Time Below 200ms

PAX Gold Price Prediction 2027: $PAXG Support After Profit-Taking Dip?

Join our free newsletter for daily crypto updates!