Loading
Get Access
Subscribe
The hacking group TeamPCP has been observed deploying a wiper script within compromised Kubernetes clusters. The script performs a check on the system configuration to identify Iranian-based environments. Once identified, the malware executes commands to wipe the affected machines, leading to potential service disruption and data loss.
This incident highlights the increasing use of container orchestration platforms as primary targets for destructive cyber operations. The use of region-specific triggers suggests a targeted campaign that could escalate into broader infrastructure attacks. For enterprises, this underscores the necessity of securing Kubernetes control planes and monitoring for unauthorized script execution.
Advisory purposes only · QPulse Security Intelligence Platform · 2026 · Brief #00403
