Ransomware group
Gunra ransomware: victims and leak site activity
The Gunra ransomware group has listed 54 victims on its leak site since April 2025; its latest post is from 4 September 2026. Most affected countries: Brazil, South Korea and Spain. Most targeted sector: Manufacturing.
Total posts
54
First seen
2025-04-23
Latest post
2026-09-04
Countries hit
28
About Gunra
Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.
Most targeted countries
- Brazil 6
- South Korea 6
- Spain 4
- Hong Kong 3
- Thailand 3
- Uruguay 3
- United Arab Emirates 2
- Argentina 2
- Australia 2
- Canada 2
Most targeted sectors
- Manufacturing 13
- Professional Services 9
- Healthcare 8
- Technology 6
- Financial Services 4
- Transportation 3
- Energy & Utilities 2
- Hospitality 2
- Retail & E-Commerce 2
- Education 1