← All Threat Actors
Gunra
Reports 2
Last Reported 16 Aug 2026
Sectors Targeted healthcare, finance, critical-infrastructure, manufacturing, transport, government
Intelligence Reports
Gunra Ransomware Actors Hit Healthcare, Finance, and Critical Infrastructure Across Five Continents
CISA, the FBI, NSA, and South Korean authorities have issued a joint advisory on Gunra, a Conti-derived ransomware-as-a-service operation that has compromised organisations across healthcare, financial services, manufacturing, transportation, and government sectors globally.
Gunra Ransomware: Five-Agency Advisory Flags Fortinet-Backed RaaS Targeting Healthcare and Critical Infrastructure
A joint advisory from CISA, FBI, NSA, US Secret Service, and South Korea's NPA attributes 51+ attacks to Gunra, a Conti-derived ransomware-as-a-service operation exploiting two Fortinet authentication bypass vulnerabilities for initial access.