TeamPCP hacker charged in Australia

The Australian Federal Police (AFP) have charged two men from Western Australia for their alleged involvement in the cybercrime group TeamPCP. Louis Michael Gaebler, 23, and Ruben Ian Thomson, 21, are suspected of being involved in a significant cyberattack that compromised the open-source security scanners Trivy and Checkmarx KICS, as well as the AI gateway LiteLLM in March 2026.

The charges include a total of 14 offenses arising from the activities of the two men. The allegations include unauthorized access to computer systems and the distribution of malware. The AFP has emphasized that such attacks can have significant impacts on cybersecurity and the integrity of software products.

The two defendants appeared in the Perth Magistrates Court on August 27, 2026. During the hearing, details of the charges were disclosed, based on extensive investigations by the AFP. Investigators have gathered evidence that is said to link the men to TeamPCP.

Background on TeamPCP

TeamPCP is a cybercrime group that has been responsible for several high-profile attacks in recent years. The group specializes in compromising software and IT infrastructures, often targeting open-source projects. The attacks on Trivy and Checkmarx KICS have raised concerns in the security community, as these tools are widely used in many companies.

The vulnerabilities created by the attack on these software products could potentially be exploited by other cybercriminals. Therefore, the AFP has stressed the urgency of identifying and combating such threats to ensure the security of digital infrastructure in Australia.

The AFP's investigations are part of a broader strategy to combat cybercrime in Australia. The agency has expanded its resources and technologies in recent years to better respond to the constantly evolving threats. The charges against Gaebler and Thomson are an example of the police's efforts to pursue cybercrime and hold those responsible accountable.

The next steps in the legal proceedings are now awaited, as the AFP continues to investigate further possible connections and accomplices of the group. The charges could also impact other ongoing investigations in the field of cybercrime, as authorities attempt to gain a more comprehensive picture of TeamPCP's activities.

The incidents surrounding TeamPCP have also reignited the discussion about the need for enhanced security measures in software development. Experts warn that the increasing complexity of software and reliance on open-source solutions are expanding the attack surfaces for cybercriminals. The security community is working to develop standards and practices to minimize such threats.

The charges against the two men represent an important step in the fight against cybercrime in Australia. The AFP has announced that it will continue to work closely with international partners to identify and combat cyber threats. Authorities hope that such measures will strengthen trust in the country's digital infrastructure.