Hunters International — Ransomware Profile
Hunters International is a RaaS group that emerged Q3 2023, widely assessed as successor to Hive post-FBI takedown. Uses modified Hive codebase. Top 10 ransomware groups 2024 with 100+ victims. Targets healthcare, automotive, manufacturing, and financial services. The group announced its closure on its own leak site on July 3, 2025, offering free decryptors to past victims — after first announcing a shutdown on November 17, 2024 that it never carried out. By then its operators had already pivoted to World Leaks, an extortion-only operation launched January 1, 2025 (per Group-IB).Also tracked as
Hunters Intl
Tools & malware
- Cobalt Strike Command and Control
- Hunters Intl Encryptor Ransomware
- SharpRhino Remote Access Trojan
- Storage Software Exfiltration
Recent claimed victims
- Eight8Ate Holdings, Inc 2025-05-27
- Corantioquia 2025-05-27
- Wrap & Send Services 2025-05-27
- GPF Lewis 2025-05-05
- Sioux Chief 2025-05-05
- Digestive Specialists 2025-04-30
- FCC 2025-04-30
- Telco Intercontinental 2025-04-30
- Minnesota Lawyers Mutual Insurance 2025-04-28
- Kasb Bank - K-Trade 2025-04-25
- Kenworth Del Sur 2025-04-25
- Mafi 2025-04-23
- Pharma Force 2025-04-21
- HOPI 2025-04-17
- Hofmann Fördertechnik GmbH 2025-04-06
- IDS Infotech 2025-04-06
- Groupe Delcourt 2025-04-06
- Nexia Poyiadjis IT 2025-04-05
- Blackmon Mooring 2025-04-05
- TEDOM 2025-04-05
- National Sign corp 2025-04-04
- Sansone Group 2025-04-04
- Cargills Bank 2025-03-20
- Megacentro 2025-03-20
- CableVision 2025-03-17