Team MaDLeeTs
Attribution profile
- Type
- Activist
- Location
- Pakistan
- Known incidents
- 4 incidents
- Sources
- 5 sources
- First seen
- 2014-01-13
- Last seen
- 2014-10-19
- Updated
- 2026-10-13 15:39
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
MaDLeeTs, also known as Team MadLeets or Team MaDLeeTs, is a Pakistan‑based hacker group that has carried out website defacements and domain hijacking operations primarily against targets in India, Indonesia, Montenegro and Malaysia. Their activities include defacing government and political sites such as the Ludhiana Rural Police website in Punjab, the Indian Ministry of Railways’ subdomains, and various BJP and PPP webpages, as well as compromising domain registrar infrastructure to perform DNS poisoning attacks that redirected the Google Indonesia homepage and, previously, the Google Malaysia homepage to protest pages. In January 2014 the group breached Montenegro’s .me registrar (domain.me) and hijacked roughly 3,500 domains, redirecting them to defacement pages. Their typical tactics involve gaining access to registrar or hosting systems, altering DNS records or uploading defacement pages with messages that claim responsibility and provide contact information, without publicly reported use of malware or financial gain. While broader reporting notes Pakistani security firms collaborating with the state on cyber‑espionage campaigns such as Arachnophobia, no public source directly links MaDLeeTs to state sponsorship or specific malware families.
Incidents
Attributed incidents are available to members.
4 incidentsSources
Sources available to members: 5 sources.