Two Men Charged in TeamPCP Hack in Australia

The Australian Federal Police (AFP) charged two men from Western Australia on August 27, 2026, for their alleged involvement in the cybercrime group TeamPCP. Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, are suspected of being involved in the compromise of the open-source security scanners Trivy and Checkmarx KICS, as well as the AI gateway LiteLLM in March 2026. The charges include a total of 14 offenses related to various aspects of cybercrime. AFP investigations revealed that the two men were implicated in the attacks on the aforementioned software products, which are widely used in the security industry.

These incidents have raised significant concerns regarding the security of open-source software. The compromise of Trivy and Checkmarx KICS has led many companies to reconsider their security protocols. These tools are commonly used to identify vulnerabilities in software projects. The attacks could potentially have far-reaching implications for the security of applications that rely on these scanners. The AFP has emphasized that the investigations are ongoing and that further arrests cannot be ruled out.

The agency is working closely with international partners to clarify the background of the attacks and to investigate possible connections to other cybercrime networks. The charges against Gaebler and Thomson are part of a broader strategy by the Australian government to combat cybercrime. This strategy also includes strengthening collaboration between various authorities and the private sector to ensure the security of critical infrastructures. The two men appeared before the Perth Magistrates Court on August 27, 2026.

During the hearing, the charges were read, and the defendants were given the opportunity to respond to the allegations. The next steps in the proceedings have yet to be determined, but another court date is anticipated. The incidents surrounding TeamPCP have also reignited the discussion about the security of open-source software. Experts warn that such attacks could undermine trust in these technologies. The security community is therefore calling for increased measures to ensure the integrity of open-source projects.

The AFP has stated in its announcement that cybercrime is taken seriously and that authorities are determined to hold perpetrators accountable. The charges against Gaebler and Thomson could serve as a signal to other potential cybercriminals that such activities will not go unpunished. The security vulnerability created by the attacks on Trivy and Checkmarx KICS is currently being analyzed by security experts. Initial reports suggest that the attackers may have exploited vulnerabilities in the software to gain unauthorized access.

The exact nature of the attacks is still under investigation. The AFP has urged the public to report suspicious activities and to educate themselves about cybersecurity practices. The agency plans to conduct informational campaigns in the coming months to raise awareness about cyber security. The next court dates for the defendants are scheduled for September 2026, as the AFP continues to work on clarifying the incidents.