Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA

The Gunra ransomware gang, leveraging leaked Conti code and exploiting vulnerabilities in Fortinet products, is expanding its operations through a RaaS affiliate program and successfully bypassing defenses, including MFA, to target critical infrastructure globally. The FBI, CISA, and South Korean authorities jointly issued an advisory warning about the gang's sophisticated tactics and urging organizations to prioritize patching and implement robust security measures. The group is attracting a diverse range of cybercriminals, including those linked to state-sponsored actors.