Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

HUNTERS · Threat actor profile

// THREAT ACTOR

HUNTERS_

Dormant

HUNTERS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of HUNTERS — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

306 Victims tracked
0 / 6 Active mirrors
2023-10-20 First listing
2025-05-27 Most recent

Victims by year

  • 2025 47
  • 2024 234
  • 2023 25

Leak site mirrors

6 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion HUNTERS INTERNATIONAL snapshot · 2025-07-17 04:11
  • hunters33mmcwww7ek7q5ndahul6nmzmrsumfs6aenicbqon6mxfiqyd.onion HUNTERS INTERNATIONAL snapshot · 2025-07-17 05:07
  • huntersinternational.net Error snapshot · 2024-09-24 08:03
  • huntersinternational.su Срок регистрации домена истек snapshot · 2025-05-26 17:17
  • hunters55wwmd25ycahnbn5xh45hvtwbmby6ly4p6qee5pughbyrajqd.onion snapshot · 2024-11-23 10:54
  • hunters33dootzzwybhxyh6xnmumopeoza6u4hkontdqu7awnhmix7ad.onion snapshot · 2024-12-09 22:09

Recent victims

The 50 most recent victims claimed by HUNTERS. Total in the index: 306.

Date listed Victim Description
2025-05-27 Eight8Ate Holdings, Inc
2025-05-27 Corantioquia
2025-05-27 Wrap & Send Services
2025-05-05 GPF Lewis
2025-05-05 Sioux Chief
2025-05-01 Digestive Specialists
2025-05-01 FCC
2025-05-01 Telco Intercontinental
2025-04-28 Minnesota Lawyers Mutual Insurance
2025-04-25 Kenworth Del Sur
2025-04-25 Kasb Bank - K-Trade
2025-04-23 Mafi
2025-04-21 Pharma Force
2025-04-17 HOPI
2025-04-06 Hofmann Fördertechnik GmbH
2025-04-06 IDS Infotech
2025-04-06 Groupe Delcourt
2025-04-05 Nexia Poyiadjis IT
2025-04-05 TEDOM
2025-04-05 Blackmon Mooring
2025-04-04 National Sign corp
2025-04-04 Sansone Group
2025-03-20 Cargills Bank
2025-03-20 Megacentro
2025-03-17 CableVision
2025-03-16 Courageous Home Care
2025-03-11 Edesur Dominicana
2025-03-04 Tata Technologies
2025-02-26 Kendall Auto Group
2025-02-26 Vermeer Mexico
2025-02-26 Omni United
2025-02-25 Nichino Ryokka Co Ltd
2025-02-22 CCOO Servicios
2025-02-22 SPEED Co
2025-02-17 Swissmem
2025-02-12 Rogers
2025-02-08 SAKAI SOUKEN Co.
2025-02-07 Robertshaw
2025-01-20 PetroVietnam Exploration Production Corporation
2025-01-11 RocSearch
2025-01-11 Barber Specialties
2025-01-11 Patriarche Office of Architecture
2025-01-11 Unisource Information Services
2025-01-11 Costex
2025-01-11 T. Hasegawa USA
2025-01-11 COROB
2025-01-03 Nikki-Universal Co Ltd
2024-12-26 Family Help & Wellness
2024-12-24 SeaLandAire Technologies
2024-12-23 SmartLynx Airlines SIA

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.