Summary
⚠️ Hunters International, a ransomware group, is shutting down and offering free decryptors to all affected organizations.
At the beginning of 2025, it appeared that Hunters International was abandoning encrypting victims and was re-branding as World Leaks. But Hunters kept updating their leak site with new encryption incidents instead of going extortion-only and becoming World Leaks. A World Leaks spokesperson subsequently informed DataBreaches that they had parted company with Hunters International over the use of encryption:
We were a part of them but separated due to differences in views and ideas.
The main difference is that we don’t want to harm businesses by blocking their operability.
Data extortion is a much better business model because it doesn’t render companies inoperable and boosts overall cybersecurity to protect private customers’ data.
Now Hunters International has removed all listings from their leak site and posted an important notice:
Project Closure and Free Decryption Software for Affected Companies
We, at Hunters International, wish to inform you of a significant decision regarding our operations. After careful consideration and in light of recent developments, we have decided to close the Hunters International project. This decision was not made lightly, and we recognize the impact it has on the organizations we have interacted with.
As a gesture of goodwill and to assist those affected by our previous activities, we are offering free decryption software to all companies that have been impacted by our ransomware. Our goal is to ensure that you can recover your encrypted data without the burden of paying ransoms.
We understand the challenges that ransomware attacks pose, and we hope that this initiative will help you regain access to your critical information swiftly and efficiently. To access the decryption tools and receive guidance on the recovery process, please visit our official website.
We appreciate your understanding and cooperation during this transition. Our commitment to supporting affected organizations remains our priority as we conclude our operations.
There is nothing on their site at this time, though, that gives guidance or a decryptor. Victims may have to wait to get the help Hunters says they are now offering.
DataBreaches reached out to World Leaks to ask them if now that Hunters was abandoning encryption, if Hunters and World Leaks would collaborate as originally planned. This post will be updated if a reply is received.
Recommendations
Organizations that were previously targeted by Hunters International should:
- Monitor the group's website for updates on the availability of the promised decryption tools.
- Prepare to recover encrypted data once the decryptors are released, but do not pay any ransom demands in the meantime.
- Review and strengthen their cybersecurity measures to prevent future ransomware attacks.
Source: Databreaches.net
Read Original Article →