Forescout Report Detail Hunters International Ransomware Gang Tactics

Forescout’s analysis reveals Hunters International as a sophisticated Rust-based ransomware-as-a-service used to compromise over 200 organizations; attackers exploited an Oracle WebLogic debug port (8453) to deploy a China Chopper web shell and leveraged tools such as Plink, Impacket, RDP, AnyDesk and TeamViewer for lateral movement, making detection and disruption more difficult and posing a significant ongoing threat.