Skip to content

Hunters International Shuts Down, Marking a Turning Point in 2025's Ransomware Landscape

Following a year of disruption and fragmentation, Hunters International's shutdown marks a new chapter in the ransomware ecosystem. Will other groups follow suit?

In this image, we can see an advertisement contains robots and some text.
In this image, we can see an advertisement contains robots and some text.

Hunters International Shuts Down, Marking a Turning Point in 2025's Ransomware Landscape

In late 2025, Hunters International, a once-active ransomware group, announced its shutdown. This marked a significant shift in the cybercrime landscape, following a turbulent year in 2024 that saw a decline in ransomware revenue and a more fragmented ecosystem.

In 2024, ransomware groups collected around $813.55m, a substantial drop from the $1.25bn earned in 2023. This decrease can be attributed to several factors. The law enforcement takedown of LockBit in early 2024 disrupted one of the most prolific groups, contributing to a 35% year-over-year fall in ransomware payments. Additionally, the alleged 'exit scam' by the BlackCat group following its attack on Change Healthcare further disrupted the ecosystem.

The ransomware ecosystem in 2024 was marked by disruption, fragmentation, and a significant decline in revenue. The increased resilience of victims and the actions of law enforcement contributed to this shift. The Hunters International group's unexpected activity and offer of free decryptors added another layer of complexity to the evolving cybercrime landscape.

Read also:

Latest