White Paper
THREAT PROFILE: Hunters International Ransomware
Hunters International is a cybercriminal group first identified in 2023 that initially operated as a ransomware-as-a-service (RaaS) platform before transitioning to an extortion-only model in late 2024. The group originally employed double extortion, encrypting victim systems while stealing sensitive data and threatening to release that information through a dedicated leak site if ransom demands were not met. After shifting its strategy, the organization focused primarily on data theft and extortion without relying on encryption. Hunters International has frequently targeted manufacturing and industrial organizations, taking advantage of the operational and financial impact of disruptions within these sectors. This threat profile examines the group’s targeted industries and regions, known
