Threat actor
Gunra
Also tracked as Gunra Ransomware
Tracked by CyberSIXT since 31 Jul · RSS
5Articles, all time
0Articles, last 30 days
2CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 13 weekslast report 12 Aug5 articles4 outlets
5 articles from 4 outlets since 31 Jul; the latest 90 days ago.
- Wed 12 Aug. Infosecurity. Gunra ransomware exploits Fortinet flaws, targets government.
- Tue 11 Aug. Dark Reading. Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA. Cites a CVE in CISA KEV.
- Tue 11 Aug. The Hacker News. Gunra Ransomware Exploits Fortinet, Schneider Weaknesses.
- Mon 10 Aug. DataBreaches. Gunra Ransomware Targets Government and Critical Infrastructure.
- Fri 31 Jul. DataBreaches. Lazarus shares tools with Gunra ransomware in South Korea attacks.
- Known exploited CVE
- Article naming Gunra
- Articles a day, all coverage
- Quiet time, folded
Drawn: all 5 articles.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 12 Aug | Article | Infosecurity | Gunra ransomware exploits Fortinet flaws, targets government |
| 11 Aug | Article | Dark Reading | Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA |
| 11 Aug | Article | The Hacker News | Gunra Ransomware Exploits Fortinet, Schneider Weaknesses |
| 10 Aug | Article | DataBreaches | Gunra Ransomware Targets Government and Critical Infrastructure |
| 31 Jul | Article | DataBreaches | Lazarus shares tools with Gunra ransomware in South Korea attacks |
Connections
2 exploited CVEs. What the record links this actor to; hover or use the arrow keys.
In CISA KEV
Show as a listHide the list
- Exploited CVEs
- CVE-2025-24472, CVE-2024-55591
- Affected vendors
- Fortinet
CVEs exploited2
CVEs an article attributes to Gunra, most covered first
- CVE-2024-55591Exploited
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
9.6Critical94% EPSS · 2 articles - CVE-2025-24472Exploited
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
8.1High7.2% EPSS · 1 article
MITRE ATT&CK techniques
No MITRE ATT&CK® techniques are recorded for Gunra.
Articles5
Drawn: all 5 articles.
- Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFADark ReadingExploitedCVE-2024-55591
- Gunra Ransomware Exploits Fortinet, Schneider WeaknessesThe Hacker News