U.S. and South Korea warn of Gunra ransomware targeting government networks

U.S. and South Korean agencies warned that the Gunra ransomware group is hitting government and critical-infrastructure networks, exploiting Fortinet and Schneider Electric flaws and bypassing multi-factor authentication. The joint advisory describes a campaign across multiple sectors rather than a single disclosed breach.

How outlets across the spectrum are covering this story. We link out — headlines belong to their publishers; the summary above is ours.

• CISA · center · factuality: very-high
  #StopRansomware: Gunra Ransomware
• BleepingComputer · center · factuality: high
  US and South Korea warn of Gunra ransomware targeting govt agencies
• The Record · center · factuality: high
  FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructure
• The Hacker News · center · factuality: medium
  Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
• Dark Reading · center · factuality: medium-high
  Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
• CISA · center · factuality: very-high
  CISA, FBI and Partners Warn Organizations of Gunra Ransomware Actors Targeting Multiple Critical Infrastructure Sectors