Hackers Hack Victims Already Hacked by Other Hackers

SentinelOne says a new group dubbed PCPJack is targeting systems previously compromised by TeamPCP.

PCPJack removes TeamPCP tools, steals credentials, spreads malicious code, and sends data to its own infrastructure.

The campaign appears financially motivated, using access resale, extortion, and phishing-style domains aimed at password manager logins.

The case shows cybercriminal groups can fight over the same infected systems while expanding credential theft and cloud-focused attacks.