Ransomware Retreat: Hunters International Closes Shop with Free Decryptors!

Hunters International is closing its ransomware operation and offering free decryptors to victims. Citing “recent developments,” the cybercrime gang is now focusing on data theft and extortion. Apparently, even cybercriminals have a conscience—or maybe just a declining profit margin!

Pro Dashboard

Hot Take:

Well, it seems like Hunters International is trading their black hats for halos. In a surprising twist, the cyber Robin Hoods have decided to hang up their ransomware spurs and instead offer their victims a free pass out of encryption jail. Perhaps they realized that with all the heat from law enforcement, it’s better to exit stage left before they become the star attraction in a cybercrime courtroom drama. Free decryptors for all, and to all a good night!

Key Points:

  • Hunters International RaaS operation has officially shut down.
  • Free decryptors are being offered to victims to recover their data.
  • The shutdown is attributed to law enforcement pressure and reduced profitability.
  • Group-IB identified a rebranding effort into an extortion-only operation called World Leaks.
  • Hunters International was responsible for nearly 300 ransomware attacks globally.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?