TOXCAR CYBER TEAM
TOXCAR CYBER TEAM is a threat actor group, tracked by Brandefense. It targets the Government sector in India and Australia. It uses 1 MITRE ATT&CK technique.
- Techniques
- 1
- Exploited CVEs
- No CVE data
- First seen
- Jan 15, 2024
- Last seen
- Feb 13, 2024
- Record updated
Who They Target.
How They Operate · MITRE ATT&CK.
1 techniques across 1 of 14 tacticsReconnaissance·
Resource Development·
Initial Access·
Execution·
Persistence·
Privilege Escalation·
Defense Evasion1
Network Denial of Service
Credential Access·
Discovery·
Lateral Movement·
Collection·
Command and Control·
Exfiltration·
Impact·
About TOXCAR CYBER TEAM.
Toxcar Cyber Team is an Indonesian hacktivist collective active at least since early 2024 that publicises its operations through Telegram and social media. Threat intelligence reporting places it among Indonesian channels that present themselves as pro-Palestinian and conduct operations against India and Israel, and it was named among the most active groups targeting Indian cyberspace around the 2024 Indian general election. In January 2024 it claimed a DDoS attack on a website of Indian coal authorities, which LulzSec Indonesia later reposted.
In January and February 2024 the group repeatedly claimed breaches of Australian targets, including the Australian Parliament website, Sky News Australia and the South Australian state government; independent analysis found that most of the 'leaked' material was already publicly available, so the claims are assessed as largely exaggerated and aimed at perception rather than demonstrating real intrusion capability. Its observed toolkit consists of DDoS, defacement-style claims and the publication of purported data leaks, with motivation that appears ideological rather than financial.
Last updated Nov 10, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.