Ransomware has a new target. Is your backup ready?
ALPHV, BlackMatter, and Gunra have wiped backups before encryption to raise ransom pressure.
46
- Mentions · 7d0
- Mentions · 30d1
- All mentions3
- First seenAug 12, 2026
- Last mentioned23d ago
Timeline
3 articles · newest firstGunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure
US and Korean agencies warn Gunra ransomware actors exploit Fortinet flaws and stealthily exfiltrate large data volumes, targeting critical infrastructure.
76
Gunra Ransomware Exploits Fortinet FortiOS, FortiProxy Flaws to Breach Networks
CISA, FBI, and South Korean agencies warn Gunra ransomware, with 51 victims since April 2025, exploits Fortinet flaws for double-extortion attacks on critical infrastructure.
76
Related CVEs
by mentions- CVE-2024-5559194%9.8Unauthenticated Super-Admin Bypass in Fortinet FortiOS and FortiProxy
- CVE-2025-244727%8.1Authentication Bypass in Fortinet FortiOS and FortiProxy Grants Super-Admin Access
Appears with
- Gunramalware · 2
- CISAorganization · 2
- FBIorganization · 2
- Fortinetvendor · 2
- UnitedHealthorganization · 1
- Crystal Valleyvictim · 1
- Akirathreat actor · 1
- BlackCatthreat actor · 1
- KNPAorganization · 1
- NEW Cooperativevictim · 1
- BlackMattermalware · 1
- FortiProxyproduct · 1
- BlackMatterthreat actor · 1
- FortiOSproduct · 1
- Akiramalware · 1
- Ransomware.Liveorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.