MalwareBleeping Computer
9.8 — CRITICAL
US and South Korea warn of Gunra ransomware targeting govt agencies
U.S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems against Gunra ransomware attacks. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Gunra ransomware, a variant derived from the leaked Conti source code, has been targeting government and critical infrastructure organizations worldwide with sophisticated double-extortion attacks using exploits for FortiOS and FortiProxy vulnerabilities.
⚙️Technical Details
CVEs
CVE-2024-55591CVE-2025-24472
Affected Systems
Fortinet FortiosFortinet Fortiproxy
Attack Vectors
NETWORK (CVE-2024-55591)NETWORK (CVE-2025-24472)
💥Impact Assessment
Severity: CRITICAL
🛡️Recommended Actions
1Patch known exploited vulnerabilities in internet-facing systems as soon as possible
2Segment networks to restrict lateral movement
3Make offline backups of data
📦Affected Products
Fortinet FortiosFortinet Fortiproxy
🔐NVD Verified DataVERIFIED
CVE-2024-55591 ↗CVSS 9.8 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-288
Affected Products (CPE)
Fortinet FortiosFortinet Fortiproxy
CVE-2025-24472 ↗CVSS 8.1 — HIGH
Attack Vector
NETWORK
Complexity
HIGH
Vector String
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-288
Affected Products (CPE)
Fortinet FortiosFortinet Fortiproxy
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.