Security News > 2023 > October > Hunters International leaks pre-op plastic surgery pics in negotiation no-no

After its alleged attack on a US surgeon's clinic, the group appears to be using a particularly aggressive tactic to speed up ransom negotiations that will likely be perceived as crossing a moral line, even for cybercriminals.

According to the group's leak site, it's preparing to send bulk emails to the clinic's patients as another fear tactic designed to hasten proceedings.

The morally questionable tactic comes a week after the BlackCat ransomware group alleged that it would start calling patients of a community hospital it attacked in another apparent attempt to ensure it secured a quick ransom payment.

"I'd say the 'line' is drawn by each group," Victor Acin, threat intelligence labs manager at Outpost24, told The Register.

"On October 20, 2023 a new double extortion ransomware group calling itself Hunters International was discovered," Zscaler ThreatLabz told The Register.

The ransom note contained a link to a victim ransom portal that has nearly identical backend code to Hive with a new theme. This likely indicates that the former Hive ransomware group has either rebranded as Hunters International or sold the code to another threat group."

News URL

https://go.theregister.com/feed/www.theregister.com/2023/10/25/rebuilt_hive_ransomware_gang_stings/