Gunra ransomware

Gunra Ransomware Gang Exploits Fortinet Vulnerabilities, Bypasses MFA

The Gunra ransomware-as-a-service operation has been observed exploiting vulnerabilities in Fortinet firewall and VPN appliances to bypass multi-factor authentication and target critical infrastructure organizations. The attacks leverage leaked Conti ransomware code and known older flaws in Fortinet products, with reported successes against global critical infrastructure targets.