VECT and TeamPCP Reverse Ransomware Kill Chain With Supply Chain Credential Theft

A ransomware strain called VECT has formed an unusual supply chain partnership with a threat group known as TeamPCP, quietly exposing thousands of organizations to compromise before any ransom note appears. VECT’s operators buy their way in using stolen credentials harvested from tampered open source software rather than scanning networks for weaknesses. Most ransomware groups pick a target, gain access, then deploy their payload, meaning exposure depends on whether a group has decided to go after organizations like yours. VECT and TeamPCP do not work this way. Target selection happens only after access already exists inside a shared credential archive. Analysts at Vectra AI noted that the credential theft ran far ahead...

Read the full article at the source.