WorldLeaks is a financially motivated cybercrime group operating as an Extortion-as-a-Service platform that emerged on January 1, 2025, primarily focused on data theft and extortion without relying on file encryption. This group is a direct rebrand of Hunters International, which ceased its encryption-based ransomware operations in November 2024 due to increased law enforcement pressure and declining profitability. Hunters International is widely suspected to be a successor to the dismantled Hive ransomware group. What sets WorldLeaks apart is its strategic shift to a pure data exfiltration model, coupled with a sophisticated four-platform infrastructure that includes a public data leak site, a victim negotiation portal, an affiliate management panel, and a unique "insider journalist portal" offering advance access to leaked data, intensifying pressure on victims. While the group claims to have abandoned encryption, some incidents have shown them deploying ransomware payloads alongside

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker