Ransomware Rebrand: Hunters International’s Comedic Shift to Exfiltration-Only Tactics
Hunters International, a notorious ransomware group, is rebranding and focusing on exfiltration-only attacks. They are ditching file-encrypting ransomware, which they find too risky and unprofitable. Their new project, World Leaks, favors automated data theft, signaling a shift in ransomware tactics.

Hot Take:
Oh Hunters International, you sly foxes! While the world was busy learning how to pronounce “ransomware,” you decided to rebrand and switch tactics faster than a chameleon at a disco party. Who needs file encryption when you can just steal data and sip on some exfiltration tea, right? It’s like moving from a smash-and-grab heist to a stealthy art theft. Classy, Hunters, real classy.
Key Points:
- Hunters International is likely a rebrand of the Hive ransomware group.
- They target a variety of industries, with a preference for North American victims.
- The group is shifting from ransomware to exfiltration-only attacks.
- Hunters uses third-party OSINT services for enhanced extortion tactics.
- Automation of data theft is their new modus operandi, with plans to ditch encryption.
Already a member? Log in here