A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain.

“The connection is supported by overlapping domains, malware deployment paths, staging techniques, backend infrastructure,