An unknown group of hackers have targeted systems already compromised by cybercrime group TeamPCP, according to a report by cybersecurity firm SentinelOne. Once they gained access to these systems, they immediately expelled TeamPCC members and removed their tools. The hackers then used their access to replicate across cloud infrastructure, steal various types of credentials, and send stolen data back to their infrastructure. The report suggests that the hackers are either disgruntled ex-TeamPCP members, part of a rival group, or a third party influenced their attack. The financial gain of these attacks appears to be financial, with the hackers focusing on monetizing credentials through reselling them.