Introduction
Hunters International, previously known for its Ransomware-as-a-Service tactics, is undergoing a major transformation, now focusing exclusively on data theft and extortion.
Insights from Group-IB
Despite its announcement to cease operations in November 2024 due to dwindling profits and increased attention from government bodies, Hunters International has embarked on a new journey. Established on January 1, 2025, their latest venture, “World Leaks”, continues their nefarious activities under an extortion-only model.
The Shift in Strategy
According to insights from threat intelligence firm Group-IB, the rebranded group has abandoned ransomware for a more straightforward extortion approach, employing a sophisticated exfiltration tool to infiltrate victim networks. This tool automates the theft of sensitive data, streamlining their criminal processes.
World Leaks: A Closer Look
The newly developed tool is an advanced version of the Storage Software exfiltration tool, which was also used by Hunters International’s affiliates for ransomware attacks. This shift signifies a strategic move towards a model where encryption is no longer used in conjunction with extortion.
Legacy and Impact of Hunters International
Emerging in late 2023 and initially suspected as a Hive rebrand due to code similarities, Hunters International targeted various platforms, orchestrating over 280 attacks across the globe. Their broad spectrum of victims includes large corporations and government entities, revealing the gang’s extensive reach.
- Tata Technologies
- AutoCanada
- U.S. Marshals Service
- Hoya Corporation
- Austal USA
- Integris Health
- Fred Hutch Cancer Center
These attacks have not only proved costly to the organizations but have also posed severe privacy threats, particularly in cases like the Fred Hutch Cancer Center, where sensitive patient data was compromised.
Ransom Demands: A Financial Perspective
The financial demands made by Hunters International have varied significantly, with ransom amounts typically scaling according to the size and wealth of the targeted organization, ranging from hundreds of thousands to multiple millions of dollars.
For further insights on the latest cyber threats and defenses, read the Red Report 2025.
Related: Unlock New Levels of Efficiency with Windows 11’s Latest Taskbar Icon Scaling Feature
Last Updated: April 3, 2025
