Cross-Sector entity
Of the tracked stories, 2 of 2 also mention CISA, the most common co-covered peer. ransomware accounts for 1 of the 2 tracked stories, while 1 other category carries the remainder. The tracked stories average 3 original sources each. Gunra appears in 2 tracked Cross-Sector stories from August 12, 2026.
2 verified stories tracked
Last mentioned: Aug 12, 2026
Entity pulse
Coverage balance Negative coverage leads. Negative coverage exceeds positive coverage by 100 percentage points.
Figures are computed live from our source-verified story record — see our methodology for how impact and sentiment are derived.
Of the tracked stories, 2 of 2 also mention CISA, the most common co-covered peer. ransomware accounts for 1 of the 2 tracked stories, while 1 other category carries the remainder. The tracked stories average 3 original sources each. Gunra appears in 2 tracked Cross-Sector stories from August 12, 2026.
Computed from the 2 stories linked to this entity. Beat comparisons are omitted because no baseline was available for this window.
Coverage cohort
Other entities that clear the same relevance threshold in stories also covering Gunra. Shared-story counts are live from our verified record — not editorial picks.
Joint US-South Korea advisory issued
CISA and South Korean intelligence agencies release a cybersecurity advisory detailing Gunra's exploitation of Fortinet and Schneider Electric flaws.
Formal RaaS affiliate program launched
Gunra operators announce a ransomware-as-a-service program on dark web forums, providing affiliates with a management panel and tools.
Gunra ransomware emerges
The Gunra ransomware group is first observed in the wild, targeting global organizations with double extortion tactics.
The exploitation of vulnerabilities in Fortinet and Schneider Electric products by Gunra ransomware poses financial risks to the companies and their customers. With 51 victims in critical sectors, market implications include potential lawsuits, reputational damage, and increased cyber insurance costs.
A joint US-South Korea advisory reveals Gunra ransomware has hit 51 organizations by weaponizing CVE-2024-5559 in Schneider Electric gear and CVE-2025-24472 in Fortinet products. The group uses double extortion, phishing, and advanced encryption, having launched a formal RaaS program in January 2026.
Source: The Hacker News
