Hunters International Shuts Down, Expected Relaunch as World Leaks Extortion Gang

Hunters International, a ransomware group known for encrypting victim data and extorting organizations, announced it is shutting down operations and offering free decryption keys to its victims. While the group cited unspecified "recent developments" as the reason for closure, cybersecurity experts remain skeptical, noting that ransomware gangs often rebrand or return under new names rather than permanently disbanding. Hunters International is widely believed to have rebranded or split into an extortion-only group called World Leaks that focuses on data theft without deploying ransomware, emphasizing less disruption to victim operations. Despite the closure announcement, Hunters International continued to update its leak site with new encryption incidents until recently removing all listings. The decryption tools promised by Hunters International have not yet been made available, and some analysts question their effectiveness. This shutdown follows a pattern seen with other ransomware groups, where motives range from law enforcement pressure to financial goals, but the possibility of reemergence under different guises remains high.