Ransomware Retreat: Hunters International Closes Shop with Free Decryptors!
Hunters International is closing its ransomware operation and offering free decryptors to victims. Citing “recent developments,” the cybercrime gang is now focusing on data theft and extortion. Apparently, even cybercriminals have a conscience—or maybe just a declining profit margin!

Hot Take:
Well, it seems like Hunters International is trading their black hats for halos. In a surprising twist, the cyber Robin Hoods have decided to hang up their ransomware spurs and instead offer their victims a free pass out of encryption jail. Perhaps they realized that with all the heat from law enforcement, it’s better to exit stage left before they become the star attraction in a cybercrime courtroom drama. Free decryptors for all, and to all a good night!
Key Points:
- Hunters International RaaS operation has officially shut down.
- Free decryptors are being offered to victims to recover their data.
- The shutdown is attributed to law enforcement pressure and reduced profitability.
- Group-IB identified a rebranding effort into an extortion-only operation called World Leaks.
- Hunters International was responsible for nearly 300 ransomware attacks globally.
Already a member? Log in here