TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th)
2026-03-27T19:23:55Z•7188f958b70416ea06c7ff49f620b24abf6b1661498f4bf244b5116e7063ffcd
AppleCISACheckmarxIP-KVMKEVKVMLiteLLMNetSupportPyPIRATRemcosSectopSmartApeSGStealCTeamPCPTelnyxVect ransomwaredetectionmalwarepatchesransomwaresecurity-scanner-abusesupply-chainsupply-chain-compromisethreat-intelligence
What happened
This set of SANS ISC entries (Mar 23–27, 2026) centers on an active supply‑chain campaign attributed to the TeamPCP group: updates report a Telnyx PyPI compromise, a Vect ransomware mass‑affiliate program with a first publicly named victim, and broader scope implications (including Checkmarx artifacts) with a CISA KEV entry and published detection tools. Related coverage highlights a March 2026 Apple security update batch, a separate SmartApeSG campaign distributing multiple RATs (Remcos, NetSupport, StealC, Sectop/ArechClient2), guidance on detecting rogue IP KVMs and associated risks, and a踩
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 7188f958b70416ea06c7ff49f620b24abf6b1661498f4bf244b5116e7063ffcd
- Enrichment time
- 2026-03-27T19:23:55Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.