Hunters International

Hunters International, transformed into World Leaks, continues operations post-renaming, victimizing entities such as Tata Technologies and ICBC's London HQ. Despite law enforcement's increasing pressure on ransomware activities, the group's pivot to a data theft-focused model using a software-as-a-service platform indicates adaptability. The service offers user-friendly and clandestine methods of data exfiltration. This shift aligns with a broader trend where ransomware groups adopt data extortion strategies, emphasizing the persistence and evolution of cyber threats.

Source: https://www.scworld.com/brief/hunters-international-shifting-tactics-amid-growing-risks

TPRM report: https://scoringcyber.rankiteo.com/company/hunters-international

"id": "hun539040325",
"linkid": "hunters-international",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Technology',
                        'name': 'Tata Technologies',
                        'type': 'Corporation'},
                       {'industry': 'Finance',
                        'location': 'London',
                        'name': "ICBC's London HQ",
                        'type': 'Corporation'}],
 'attack_vector': 'Software-as-a-Service Platform',
 'data_breach': {'data_exfiltration': 'Yes'},
 'description': 'Hunters International, now known as World Leaks, continues '
                'operations post-renaming, victimizing entities such as Tata '
                "Technologies and ICBC's London HQ. Despite law enforcement's "
                "increasing pressure on ransomware activities, the group's "
                'pivot to a data theft-focused model using a '
                'software-as-a-service platform indicates adaptability. The '
                'service offers user-friendly and clandestine methods of data '
                'exfiltration. This shift aligns with a broader trend where '
                'ransomware groups adopt data extortion strategies, '
                'emphasizing the persistence and evolution of cyber threats.',
 'motivation': 'Data Extortion',
 'ransomware': {'data_exfiltration': 'Yes'},
 'threat_actor': 'World Leaks (formerly Hunters International)',
 'title': 'Hunters International (World Leaks) Data Theft Incident',
 'type': 'Data Theft'}