The FBI and South Korea's government jointly warned on August 10, 2026, that the Gunra ransomware gang has been breaching critical infrastructure organizations across multiple sectors worldwide.
Gunra operates as a ransomware-as-a-service outfit, CyberScoop reported, and its attacks span multiple countries. The gang has targeted a range of critical infrastructure sectors, though the warning did not limit its scope to any single industry.
According to The Record, Gunra gains entry by exploiting vulnerabilities in popular firewall brands. The advisory identified that weakness as a primary method the group uses to compromise target networks.