Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

Gunra ransomware exploits security flaws in Fortinet FortiOS and FortiProxy appliances to breach critical infrastructure networks across multiple sectors globally, using a double extortion model with data encryption and exfiltration. The group leverages phishing, advanced encryption, and lateral movement tools, targeting mainly Australia, East Asia, and Europe, and operates via a dark web affiliate program.

This Wire brief sits within Fusion42's coverage of Cybersecurity.