Hunters International Moving to Straight Data Extortion Attacks

Researchers report that Hunters International (likely a Hive rebrand) announced ceasing ransomware encryption operations and launched a short-lived "World Leaks" project focused on data exfiltration and extortion without encrypting files. The analysis argues this may be an experiment rather than an industry-wide shift, because encryption still provides stronger leverage and larger payouts for affiliates, so most sophisticated ransomware actors are expected to continue using encryption alongside other innovations.