INDOHAXSEC – Emerging Indonesian Hacking Collective

Arctic Wolf Labs describes INDOHAXSEC, an Indonesian hacktivist collective active since October 2024 that conducts DDoS, website defacements, ransomware (e.g., ExorLock, Dancokware), hack-and-leak operations and doxxing across the Indo‑Pacific; the report documents the group’s GitHub/Telegram/TikTok presence, provides tooling descriptions and SHA256 IoCs, and recommends hardening internet-facing assets and detection updates to mitigate the group’s disruptive activities.