Hunters International Dumps Ransomware, Goes Full-on Extortion
ID: e7886511-4714-517e-a910-65c00a2727fd
STIX ID: report--e7886511-4714-517e-a910-65c00a2727fd
Feed Name: Security Boulevard
Hunters International, a RaaS gang descended from Hive, has reportedly stopped emphasis on file encryption and rebranded as "World Leaks" to focus on extortion-only attacks: using a Rust-based, cross-platform exfiltration tool and a metadata-focused "Storage Software" to steal and catalogue data from over 200 victims (including a 1.4 TB theft from Tata Technologies), adopting quieter TTPs and OSINT-driven doxxing approaches as law enforcement pressure and declining ransom payments reshape the ransomware ecosystem.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
