Ransomware gang Hunters International says it’s shutting down

The notorious ransomware group, Hunters International, has officially declared its closure on their dark web platform. In a post released on Thursday, the hackers stated, "After careful consideration and in light of recent developments, we have decided to close the Hunters International project." However, they did not elaborate on the specific circumstances prompting this decision. In what seems to be a surprising turn of events, the group is also offering complimentary decryption keys to all organizations affected by their ransomware attacks. They expressed a desire to allow victims to recover their encrypted data without the financial strain of ransom payments. Victims are encouraged to visit their official site to obtain these keys and restore their files, although, at this time, such information is not available on the site. Over the past two years, Hunters International has claimed numerous high-profile victims, including a U.S. cancer center and the U.S. Marshals Service, the latter of which denied any breach by the group. Historically, many ransomware gangs have released decryption keys before disbanding, often for various reasons such as rebranding or to evade law enforcement. Allan Liska, a threat intelligence analyst at Recorded Future, noted that there have been indications since April that Hunters International might rebrand as World Leaks. He commented, "I think this is more of a ‘cutting of ties’ with the old infrastructure." The potential for a new name could serve to confuse researchers and law enforcement or to escape potential repercussions from ongoing investigations. Liska further explained that the group's decision to dissolve might stem from the risks associated with prolonged use of the same technical infrastructure, which could attract law enforcement scrutiny. He referenced the Hive ransomware gang, which was dismantled by the FBI earlier this year, as an example of the dangers faced by such groups. Alternatively, it could also be a preemptive move if they sensed law enforcement was closing in on their operations.