Gunra Ransomware Exploits Fortinet and Schneider Electric Vulnerabilities to Target Global Infrastructure

Gunra ransomware exploits vulnerabilities in Fortinet and Schneider Electric systems to breach global critical infrastructure, employing a double extortion model with data encryption and exfiltration. The attack chain involves phishing, lateral movement via SMB, credential dumping, and data leaks, targeting sectors like healthcare and finance.

Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and organizations across the world.

Targets of these attacks include healthcare and public health, financial services, government services and facilities, and professional and nonprofit services.

"Gunra is another variant in the ongoing trend of

Read original article