- Hunters International hit many public and private entities, including Tata and Telecom Namibia
- The group says that “in the light of recent events”
- He even launched deciphered keys for his victims
An important ransomware operation has announced a complete closure and the public launch of the deciphering keys; However, some are skeptical that this is the last one we have seen of this particular group.
The operators, known as Hunters International, published a brief announcement on their dark website, notifying their followers, affiliates and the broader cybercriminal community, which will no longer operate.
“After a careful consideration and the light of recent developments, we have decided to close the International Hunters project,” reads the announcement. “This decision was not taken lightly, and we recognize the impact it has on the organizations with which we have interacted.”
PHISHING Return of Call
While the group mentions “recent developments,” he does not explain, so we do not know if this means that they were seized by the police, or simply extorted enough money to leave it.
TechcrunchOn the other hand, he believes that there could be a third option: a smoke and spawning effort to throw the police. Discussing the matter with the intelligence analyst at Future recorded threats, Allan Liska, Techcrunch He learned that the group could change the name of world leaks.
“I think this is more a” ties cut “with the old infrastructure,” Liska told the publication. This would not be the first group that renamed to try to hide its clues.
After the attack of the colonial pipe, Darkside, he renamed Blackmatter, and then Alphv/Blackcat, and Revil (Sodinokibi) was preceded by Gandcrab.
As for the release of deciphering keys, although commendable, it does not mean much for the attackers, Liska argues. These are mostly older victims who did not intend to pay anyway, so for the group, nothing was lost.
“Regarding launching deciphered keys, at this point it is not likely to win money with the victims of the hunters who are still out there, so they probably see it as a gesture that really costs them anything,” Liska concluded.