← Back to Feed

TeamPCP’s Telnyx Attack Marks a Shift in Tactics Beyond LiteLLM

March 30, 2026 · Trend Micro · Severity: MEDIUM

Moving beyond their LiteLLM campaign, TeamPCP weaponizes the Telnyx Python SDK with stealthy WAV‑based payloads to steal credentials across Linux, macOS, and Windows.

Key Takeaways

  • TeamPCP moved beyond its LiteLLM campaign to weaponize the Telnyx Python SDK.
  • The attack uses stealthy WAV-based payloads to steal credentials.
  • The Telnyx campaign targets Linux, macOS, and Windows systems.
☕ Buy a Coffee