since 2021, deploying ransomware payloads from other ransomware gangs, including LockBit, ALPHV (BlackCat), Hive, Hunters International and, most recently, Embargo. “Embargo ransomware is a new strain developed in Rust, known to use advanced encryption...

The Hunters International ransomware gang has claimed to have exfiltrated data from a Sydney-based accounting firm. The ransomware group listed T A Khoury & Co on its dark web leak site, claiming to have stolen 63.7 gigabytes worth of data. Although...

to refine and improve as we continue. You can read the January 2024 report here. Ransomware Operators: Medusa, Hunters International, Black Basta, ThreeAM, LockBit Companies targeted: Five Total data allegedly impacted: At least 395 gigabytes With...

the company as a victim on its darknet leak site overnight. In a 21 July post, World Leaks – formerly known as Hunters International – claimed to have stolen 1.3 terabytes of data, and the hackers published the data soon after. The data appears to be...

done it” and listed the company as a victim on its darknet leak site. World Leaks – thought to be a rebrand of the Hunters International hacking group – listed Nike overnight in a 22 January post. The hackers have shared little information to back up...

Sydney-based CRM provider Legrand CRM has confirmed that Hunters International exfiltrated data from its systems. Speaking with Cyber Daily, company CEO Alain Legrand said a data breach occurred but that the incident was not a ransomware attack. “We...

for more information and is currently awaiting comment. The World Leaks group is a fresh rebrand of the infamous Hunters International ransomware gang, with the main change between the two being a shift away from ransomware. Hunters International...

operator in January 2025, after the hackers behind the group closed down their previous ransomware operation, Hunters International. However, whereas Hunters was a classic double extortion operation, both stealing data and encrypting it on victims’...

BreachForums has been taken down once again, but hackers defy law enforcement as their dark web site remains. US authorities, backed by France’s Central Brigade of Cybercrime and the Paris Public Prosecutor’s Office, have seized clear-web...

which led to the personal details of roughly 1 million people being exposed. The gang behind the initial hack was Hunters International, which is believed to be a rebranded iteration of the Hive ransomware operation based on some code similarities....

Ransomware gang Hunters International has claimed an attack on an Australian CRM solution provider, listing details of the breach on its dark web leak site. Legrand CRM, a Sydney-based provider of tailored CRM solutions for SMEs, was listed on the...

say the data is nothing new. The US Marshals Service has fallen victim to an alleged ransomware attack, after the Hunters International group listed the agency on its darkweb leak site overnight. Hunters International’s site is down – whether through...

The infamous Hunters International ransomware gang has announced that it’s throwing in the towel and giving its victims a free decryption key as a parting gift. In a post to its dark web leak site on Thursday (3 July), the group announced that for an...

Infamous and now former ransomware operation Hunters International has announced a rebrand that will see it distance itself from ransomware operations and take on exclusively extortion-only and data theft cyber attacks. The group announced on 17...

The recent cyber attack on Japanese optics giant Hoya has turned out to be a ransomware attack by Hunters International, which is demanding US$10 million to prevent the release of exfiltrated data. Hoya Optics initially released a statement on 1 April...

It is also worth noting that the design language of INC’s new site resembles that of another ransomware gang, Hunters International, which could indicate collaboration or that INC’s new malware uses Hunters International’s source code, adding fuel to...

operator in January 2025 after the hackers behind the group closed down their previous ransomware operation, Hunters International. The group has claimed 116 victims since it first formed. Its last Australian victim was NSW-based petroleum distributor...

In 2022, the industrial community experienced a shift in the cyber threat landscape that was ushered in by increasingly homogenous operational technology (OT) infrastructures and knowledgeable adversaries targeting industrial control systems (ICS)....

Palo Alto Networks has launched the Unit 42 Managed Detection and Response (Unit 42 MDR), a new service that is designed to offer continuous 24/7 threat detection, investigation and response. The new offering brings together Palo Alto Networks'...

After some initial confusion among the group, Scattered Lapsus$ Hunters publishes Qantas customer data to the open web. The hacking group behind dozens of Salesforce-related compromises has published more than 150 gigabytes of Qantas customer data to...