Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure

US and Korean agencies warn Gunra ransomware actors exploit Fortinet flaws and stealthily exfiltrate large data volumes, targeting critical infrastructure.

US and Korean authorities warned that Gunra ransomware actors exploit Fortinet vulnerabilities to gain access and use stealthy techniques to exfiltrate vast volumes of data, including from Microsoft services. The group is targeting critical infrastructure organizations. Defenders should prioritize Fortinet patching and watch for large, quiet data egress.

• Gunra ransomware exploits Fortinet flaws for access.
• Stealthy exfiltration of large data volumes from Microsoft services.
• Joint warning from US and Korean agencies.
• Critical infrastructure sectors are targeted.