logo

Hunters International Dumps Ransomware, Goes Full-on Extortion

ID: e7886511-4714-517e-a910-65c00a2727fd

STIX ID: report--e7886511-4714-517e-a910-65c00a2727fd

Feed Name: Security Boulevard

Threat Score
75/100

Date Published: 2025-04-04

Date Updated: 2026-04-22

Author: Jeffrey Burt

...
...

Hunters International, a RaaS gang descended from Hive, has reportedly stopped emphasis on file encryption and rebranded as "World Leaks" to focus on extortion-only attacks: using a Rust-based, cross-platform exfiltration tool and a metadata-focused "Storage Software" to steal and catalogue data from over 200 victims (including a 1.4 TB theft from Tata Technologies), adopting quieter TTPs and OSINT-driven doxxing approaches as law enforcement pressure and declining ransom payments reshape the ransomware ecosystem.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.