Two charged over global cybercrime

Two men from Western Australia have been arrested and charged for their alleged roles in a global cybercrime syndicate that compromised more than 1,000 organizations worldwide by inserting malicious code into widely used open-source software. The arrests, made on August 26, 2026, followed a joint investigation by the Australian Federal Police, the Western Australia Police Force, and the U.S. Federal Bureau of Investigation. The men were identified by Australian media as Ruben Ian Thomson, 21, of Cottesloe, and Louis Michael Gaebler, 23, of Mandurah. Authorities allege they were principal participants in the syndicate, known as TeamPCP, which carried out a series of damaging supply-chain attacks throughout 2026. Thomson faces eight charges, including unauthorized data modification, dealing in criminal proceeds worth more than 100,000, and refusal to comply with an order to hand over device passwords. Gaebler faces six related charges. If convicted on all counts, they could face a combined maximum sentence of 82 years in prison, though sentences for multiple offenses are often served concurrently.