Hacktivist group

BekasiRootSec

BekasiRootSec is an Indonesian defacement-focused group also branded as Legion OF BekasiRootSec. Multiple defacement archives and currently accessible altered pages associate the brand with high-volume website modification, including mass submissions across shared hosting or development subdomains.

BekasiRootSec has a sustained and independently visible defacement footprint. Archive counts vary because platforms differ in coverage, deduplication and verification, but the brand continuity and repeated active artifacts are strong.

The pattern is dominated by mass submissions across shared hosting and development subdomains. This may inflate apparent victim count when one underlying access path affects many hostnames.

INFERENCE (confidence: high): Reputation within defacement archives is a central incentive, with volume, active mirrors and persistent branding functioning as status signals.

INFERENCE (confidence: medium-high): The group favors opportunistic, repeatable web compromise over long-duration stealth or specialized intrusion tradecraft.

Created by iQBlack CTI Team
Contributors 1
Last updated 2026-08-21