Hunters International Shuts Down, Offers Free Decryptors as It Morphs Into World Leaks

The infamous ransomware group Hunters International announced the shutdown of their operation and the release of free decryptors of all victims.

The announcement was made roughly three months after threat intelligence firm Group-IB reported that the group was in the process of rebranding to World Leaks, with a focus on data extortion.

Hunters has been active since late 2023 when it emerged as a rebrand of the Hive ransomware gang. Operating as a ransomware-as-a-service (RaaS), the group hit over 300 victims, mostly in North America.

Over the course of its operation, the group targeted systems running different operating systems across multiple architectures, hitting organizations of all sizes, stealing their data for double extortion, and tailoring the ransom demands for each victim.

In April, Group-IB warned of a shift in the gang’s tactics that was observed last year, when it started directly contacting the victim’s leadership and employees for ...