The notorious cybercrime group Hunters International is dropping ransomware to focus on data theft and extortion.
April 3, 2025 By Ionut Arghire
Hunters International, a notorious ransomware group that recently claimed an attack on Indian engineering firm Tata Technologies, is rebranding itself and moving to exfiltration-only tactics, threat intelligence firm Group-IB reports.
Active since late 2023, Hunters is a ransomware-as-a-service (RaaS) group that adapted many of the tools and techniques associated with Hive, the ransomware gang disrupted by law enforcement in January 2023.
According to Group-IB, evidence suggests that Hunters is a rebrand of Hive: affiliates and operators of other ransomware groups refer to the RaaS as Hive and some of the individuals involved with the operation were contacted by Hunters’ administrators from the same accounts as Hive.
