World Leaks is an extortion-focused cybercriminal operation first identified in 2025 that operates as an Extortion-as-a-Service platform. Unlike traditional ransomware groups, it is reported to have shifted away from file encryption after rebranding from Hunters International Ransomware, instead focusing on data theft and extortion. The group primarily targets organizations in the industrial and manufacturing sectors, with many victims located in North America. Once sensitive information is stolen, victims are pressured to pay to prevent the public release of their data through dedicated leak sites. This threat profile examines World Leaks’ operations, previous targets, known exploited vulnerabilities, associated threat actors, and tools used during attacks. The report also maps its tactic

Join for free to read