Malware
Hunters International
Emerging in Q3 2023 as a Ransomware-as-a-Service (RaaS) operation, Hunters International has established itself as a distinct yet controversial threat actor in the cybercrime ecosystem.
Hunters International is a Windows malware family operated by Storm-0501.
Background
Hunters International appeared in Q3 2023 as a Ransomware-as-a-Service (RaaS) operation and has since become a notable, if disputed, player in the cybercrime scene. Early research found that its code overlaps with the now-defunct Hive ransomware, but the group insists it is independent, claiming it bought Hive’s source code instead of simply rebranding. That heritage underpins sophisticated double-extortion campaigns that emphasize data theft over encryption, with documented exfiltration of medical records, financial data, and proprietary business information. Its ransomware is written in Rust, a language prized for resisting reverse engineering and running across platforms.
Source: Malpedia (Fraunhofer FKIE).