Hunters

Malware hunters, also known as bug hunters, are cybersecurity professionals who search for vulnerabilities in systems that can be exploited by malicious software (malware). In 2023, at the Pwn2Own Toronto event, these experts earned a total of $1,038,250 for identifying 58 unique zero-day vulnerabilities. These findings have crucial importance in preventing malware attacks, including those from ransomware strains like LockBit, Play, RansomHub, Cactus, Akira, Hunters, and BlackBasta. Trend, a leading entity in AI innovation since 2005, has been instrumental in providing tools that enhance the operations of security operation center (SOC) analysts and threat hunters, thereby improving their risk response capabilities. However, despite these preventive measures, hacktivist groups such as Anonymous Venezuela and Cyber Hunters launched attacks against the Venezuelan government following contested presidential elections on July 28th, 2024. This shows that cyber threats continue to evolve and adapt, requiring constant vigilance and advancement in defensive measures. Hunters International, a group linked to Russia, is one such evolving threat. They use SharpRhino malware to gain control over targeted systems and launch sophisticated ransomware attacks for financial gain. The group uses an installer system that modifies registry keys and establishes directories facilitating multiple channels to their command and control (C2) system. Like many other ransomware operators, Hunters International exfiltrates data before encrypting files, altering file extensions to .locked, and leaving a README message with payment instructions on the Tor network. The group acquired the malware from its original owners who disbanded after international law enforcement intervened.