hunters

· ActiveIn mid-October 2023, just a few days before the Europol operation, the source code of the Ransomware Hive was sold, along with its website and older versions developed in Golang and C (although this purchase has only been reported by the actors without concrete evidence). The buyer of this new source code was the group Hunters International, who claimed to have fixed the bugs in the Ransomware Hive that were responsible for preventing file decryption in some cases. The group also stated that file encryption would not be their primary focus; instead, they would use data theft as a method to pressure victims during extortion attempts.

Victims

307

Status

Active

Sites

Countries Hit

Profile

https://www.microsoft.com/en-us/security/blog/2024/09/26/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments/

https://www.bitdefender.com/blog/businessinsights/hive-ransomwares-offspring-hunters-international-takes-the-stage/

Top Countries

US149

GB16

CA14

FR12

ES9

DE9

IT8

JP6

AU5

MX5

Top Sectors

Business Services63

Manufacturing55

Technology38

Healthcare36

Recent Victims

View all 307 →

Corantioquia

CO · Public Sector

May 27, 2025

Wrap & Send Services

US · Consumer Services

May 27, 2025

Eight8Ate Holdings, Inc

PH · Hospitality and Tourism

May 27, 2025

GPF Lewis

GB · Construction

May 5, 2025

Sioux Chief

US · Manufacturing

May 5, 2025

Telco Intercontinental

US · Telecommunication

Apr 30, 2025

Digestive Specialists

US · Healthcare