Hunters
Hunters is a ransomware group with a financial motive, tracked by Brandefense. It targets 16 sectors, including Government and Technology, in 54 countries, including the United States and the United Kingdom. It uses 22 MITRE ATT&CK techniques.
- Techniques
- 22
- Exploited CVEs
- No CVE data
- First seen
- Oct 1, 2023
- Last seen
- Jul 7, 2025
- Record updated
Who They Target.
About Hunters.
Hunters International is a financially motivated ransomware-as-a-service and double-extortion operation first observed in October 2023. Acronis and other vendors report strong code similarity with Hive ransomware, but available evidence supports malware/code-lineage context rather than an automatic actor merge with Hive. Hunters International used Windows, Linux, and ESXi-focused ransomware payloads, operated a data leak site, and sometimes chose exfiltration-only extortion rather than encryption. Model World Leaks as a related successor/rebrand entity unless internal taxonomy approves aliasing.
Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.