FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure

The FBI and South Korea’s government have issued a cybersecurity advisory warning of the Gunra ransomware gang, which is exploiting vulnerabilities in Fortinet firewalls to target critical infrastructure organizations globally. The group, utilizing code derived from the Conti ransomware, is demanding over $10 million in ransom payments and has shifted to a ransomware-as-a-service model, recruiting hackers to gain initial access. The advisory highlights a significant increase in ransomware attacks against industrial organizations, with Gunra responsible for a notable number of these incidents.