Hunters International Ceases Ransomware, Offers Free Decryptors, Rebrands as World Leaks Amid Cybercrime Turf War Targeting UK Retailers

The ransomware group Hunters International has announced it will cease ransomware operations and instead focus on data theft, rebranding itself as World Leaks. Despite this declaration, skepticism remains about the group's intentions. Concurrently, a turf war has erupted among cybercriminal groups linked to recent attacks on UK retailers including Marks & Spencer, Harrods, and the Co-Op, potentially escalating cyberattacks in the sector. Additionally, the TAG-140 group has deployed the DRAT V2 remote access trojan targeting Indian government, defense, and rail sectors. Another spyware called Batavia has been reported stealing data from Russian organizations. Meanwhile, the BERT ransomware group continues to target multiple platforms across Asia and Europe. Hunters International has also offered free decryptors to victims as it ceases ransomware operations. In Spain, a highly active ransomware group has shut down and offered victims free recovery of their systems, citing ransomware as an unpromising activity.