Gunra Uses Stolen Sessions and RDP to Pivot Into Active Directory and IT Workstations

Gunra ransomware has moved from a new name to a serious enterprise threat in a short time. The group breaks into exposed edge devices, steals valuable data, and then encrypts systems across both Windows and Linux networks. The damage can spread quickly. First observed in Windows environments in April 2025, Gunra later added a Linux […] The post Gunra Uses Stolen Sessions and RDP to Pivot Into Active Directory and IT Workstations appeared first on Cyber Security News.