Gunra ransomware has quickly grown from an emerging threat in South Korea into a broader international concern.

U.S. and South Korean cybersecurity authorities are warning organizations about Gunra activity affecting government and critical infrastructure environments. For security teams, Gunra shows how quickly a relatively new ransomware operation can scale once it develops reliable tooling and begins recruiting affiliates.

Gunra emerged in South Korea before expanding

Gunra was first observed in April 2025 after attacks against five South Korean organizations.

According to the joint advisory, the operation initially used ransomware based on…

Read the full article at TECHREPUBLIC.COM