\n<\/p>\n
The ransomware gang known as Hunters International announced on its dark web page Thursday that it is shutting down.\u00a0<\/p>\n
\u201cAfter careful consideration and in light of recent developments, we have decided to close the Hunters International project,\u201d the hackers wrote in a post, without clarifying what specific developments it was referring to. \u201cThis decision was not made lightly, and we recognize the impact it has on the organizations we have interacted with.\u201d<\/p>\n
The hackers also said they are offering free decryption keys \u201cto all companies that have been impacted by our ransomware.\u201d<\/p>\n
\u201cOur goal is to ensure that you can recover your encrypted data without the burden of paying ransoms,\u201d wrote the gang, which asked victims to visit its official site to obtain the decryption keys and to recover the encrypted files.<\/p>\n
At the time of writing, there is no such information on the website.\u00a0<\/p>\n
Hunters International has claimed several victims in its two years of existence, including a U.S. cancer center<\/a> and the U.S. Marshals Service<\/a>; however, the law enforcement agency denied having been hacked<\/a> by the cybercrime gang.<\/p>\n Several<\/a> ransomware<\/a> gangs<\/a> in the past have released their victims\u2019 decryption keys, then shut down, each of them for different reasons. Some shut down only to return under a new name, perhaps in an attempt to confuse researchers and law enforcement agencies and sometimes to escape sanctions<\/a>. Others decided to call it quits after obtaining enough funds to retire.<\/p>\n In the case of Hunters International, it\u2019s still too early to tell what the gang\u2019s motivations are for shutting down, but there were signs as far back as April that point to a rebrand and transition to a group called World Leaks, according to Allan Liska, a threat intelligence analyst at cybersecurity firm Recorded Future.\u00a0<\/p>\n \u201cI think this is more of a \u2018cutting of ties\u2019 with the old infrastructure,\u201d said Liska, who has been tracking ransomware for years. \u201cAs far as releasing decryption keys, at this point they aren\u2019t likely to make any money from any Hunters\u2019 victims who are still out there, so they probably see it as a gesture that doesn\u2019t really cost them anything.\u201d<\/p>\n World Leaks group uses a new ransomware software and has a new site hosted elsewhere, but the people behind it may be the same, said Liska.<\/p>\n Liska said the reason for the gang going dark may be that \u201cusing the same technical infrastructure too long makes you more vulnerable to law enforcement,\u201d referring to Hive, a ransomware gang that was seized and shut down by the FBI<\/a> in 2023.\u00a0<\/p>\n \u201cOr, they got wind that law enforcement was closing in and decided to get ahead of them,\u201d he said.<\/p>\n<\/div>\n