CYBERSECURITYTRACKER
Permanent story citation

FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4166

As cited

Copy frozen at (site build).

ransomware

FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

The FBI and South Korea's government have warned that the Gunra ransomware gang is exploiting firewall vulnerabilities to breach critical infrastructure organizations. The threat actors gain initial access through unpatched security appliances from widely used vendors.

Why it matters: Critical infrastructure operators must immediately audit and patch firewalls from affected vendors; this group poses direct operational risk to power, water, and other essential services.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

The FBI and South Korea's government have warned that the Gunra ransomware gang is exploiting firewall vulnerabilities to breach critical infrastructure organizations. The threat actors gain initial access through unpatched security appliances from widely used vendors.

Why it matters: Critical infrastructure operators must immediately audit and patch firewalls from affected vendors; this group poses direct operational risk to power, water, and other essential services.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ransomware

FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

The FBI and South Korea's government have warned that the Gunra ransomware gang is exploiting firewall vulnerabilities to breach critical infrastructure organizations. The threat actors gain initial access through unpatched security appliances from widely used vendors.

Why it matters: Critical infrastructure operators must immediately audit and patch firewalls from affected vendors; this group poses direct operational risk to power, water, and other essential services.

VendorsFortinetGoogleMicrosoftSlackTrend Micro
Actorslazarus group
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary