of Ukraine in 2022. Groups that are thought to be made of refugees from the group include Akira, Black Basta, Hunters International, and DevMan. UPDATE 09/04/26 - Clarified response from Jones Day's Australian office.

operator in January 2025 after the hackers behind the group closed down their previous ransomware operation, Hunters International. The group has claimed 116 victims since it first formed. Its last Australian victim was NSW-based petroleum distributor...

done it” and listed the company as a victim on its darknet leak site. World Leaks – thought to be a rebrand of the Hunters International hacking group – listed Nike overnight in a 22 January post. The hackers have shared little information to back up...

services, and professional services. The ransomware threat actors most active in the region are KillSec, FunkLocker, Hunters International, and Qilin, with 63, 59, 35, and 34 victims, respectively. “Ransomware as a service (RaaS) providers FunkLocker...

After some initial confusion among the group, Scattered Lapsus$ Hunters publishes Qantas customer data to the open web. The hacking group behind dozens of Salesforce-related compromises has published more than 150 gigabytes of Qantas customer data to...

BreachForums has been taken down once again, but hackers defy law enforcement as their dark web site remains. US authorities, backed by France’s Central Brigade of Cybercrime and the Paris Public Prosecutor’s Office, have seized clear-web...

operator in January 2025, after the hackers behind the group closed down their previous ransomware operation, Hunters International. However, whereas Hunters was a classic double extortion operation, both stealing data and encrypting it on victims’...

the company as a victim on its darknet leak site overnight. In a 21 July post, World Leaks – formerly known as Hunters International – claimed to have stolen 1.3 terabytes of data, and the hackers published the data soon after. The data appears to be...

The infamous Hunters International ransomware gang has announced that it’s throwing in the towel and giving its victims a free decryption key as a parting gift. In a post to its dark web leak site on Thursday (3 July), the group announced that for an...

for more information and is currently awaiting comment. The World Leaks group is a fresh rebrand of the infamous Hunters International ransomware gang, with the main change between the two being a shift away from ransomware. Hunters International...

more groups are focusing on data exposure over data encryption to leverage their extortion threats. Groups like Hunters International (which appears to have recently evolved into a group called World Leaks) and Clop rely purely on data exfiltration over...

Infamous and now former ransomware operation Hunters International has announced a rebrand that will see it distance itself from ransomware operations and take on exclusively extortion-only and data theft cyber attacks. The group announced on 17...

since 2021, deploying ransomware payloads from other ransomware gangs, including LockBit, ALPHV (BlackCat), Hive, Hunters International and, most recently, Embargo. “Embargo ransomware is a new strain developed in Rust, known to use advanced encryption...

say the data is nothing new. The US Marshals Service has fallen victim to an alleged ransomware attack, after the Hunters International group listed the agency on its darkweb leak site overnight. Hunters International’s site is down – whether through...

on topics such as taxation and superannuation compliance to “SME and high-net-wealth individuals”. On 15 July, the Hunters International ransomware gang listed Gibbs Hurley on its dark web leak site. As is usually the case with the Russia-based...

Sydney-based CRM provider Legrand CRM has confirmed that Hunters International exfiltrated data from its systems. Speaking with Cyber Daily, company CEO Alain Legrand said a data breach occurred but that the incident was not a ransomware attack. “We...

Ransomware gang Hunters International has claimed an attack on an Australian CRM solution provider, listing details of the breach on its dark web leak site. Legrand CRM, a Sydney-based provider of tailored CRM solutions for SMEs, was listed on the...

said. “Indeed, our data shows recent upticks in activity from other ransomware groups, such as Black Basta, Akira, Hunters International and BianLian. This trend supports the notion that affiliates are likely shifting their operations to alternative...

It is also worth noting that the design language of INC’s new site resembles that of another ransomware gang, Hunters International, which could indicate collaboration or that INC’s new malware uses Hunters International’s source code, adding fuel to...

Hunters International posts nearly 70 gigabytes of data, totalling more than 60,000 individual files, belonging to an Australian healthcare supplier. The Hunters International ransomware gang has claimed another Australian scalp, this time healthcare...