Hacktivist group

Team NWH Security

Team NWH Security is an India-origin/pro-India hacktivist collective publicly visible from at least March 2023 and commonly expanded as New World Hacktivists. Its recoverable activity spans DDoS-related availability disruption, website defacement and data-leak claims against government, military, financial, education and telecommunications targets.

The strongest incident cluster occurred in Bangladesh in August 2023, when Cyber Daily reported disruption affecting ICB Islamic Bank, Bangladesh Commerce Bank, the Bangladesh Navy and the Bangladesh Air Force. This supports availability-impact activity at medium confidence, while the exact flood layer, infrastructure and operator tasking remain unknown.

The group operates as a coalition node. Public reporting links it with Kerala Cyber Xtractors, BlackDragonSec, Indian Cyber Crew, TeamUCC and Team Network Nine, and later places it in India–Indonesia, India–Maldives and Israel–Hamas hacktivist mobilizations. These ties support social-network analysis but do not transfer incidents, tools or access.

Data-leak claims — including alleged Indonesian and Pakistani datasets — are less well substantiated than the public-service disruption record. No actor-specific malware, botnet, exploit chain, C2 or durable backend infrastructure was recovered. Team NWH Security is therefore profile-worthy as a visible hacktivist coordination and impact actor, not as a technically mature intrusion set.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-08-26

ATT&CK

MITRE ATT&CK

T1491.002External Defacement
T1498.001Direct Network Flood