Search threats, CVEs… ⌘K
← Back to all threat actors

gunra

Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.

How we source and review actor profiles
Motivation
ransomware
First seen
2026-05-22
Last seen
2026-09-04
Sectors
manufacturing, healthcare, professional-services, financial-services, technology, business-services, energy-utilities, retail-e-commerce, transportation, hospitality, government-defense, education
Status
Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

First listed
Victim claimBlanco & Etcheverry listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimOccidental listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Last observed
Indicator3 indicators cataloged

Types: onion.

First listed
Victim claimBOMOHSA listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Cataloged
CVECVE-2024-55591 linked to this actor

#StopRansomware: Gunra Ransomware

Cataloged
CVECVE-2025-24472 linked to this actor

#StopRansomware: Gunra Ransomware

First listed
Victim claimPT All Cosmos Biotek listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimworldtube listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimSiam Stabilizers and Chemicals Co., Ltd. / SSC listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimWeilhotel listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimDissinger and Dissinger Law Firm listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimNew Tiles S.L. listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimPirámide Seguros listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimon-us listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimYuditec S.A. listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimMHE9 Logística Ltda listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimSuárez&Clavera listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimCambridge Law Chambers listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimSTAREMPIRE listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
Claimed
Victim claimSOMAFIX listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimCablematic Dos Mil SLU listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimFrontier Financial Group listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimEl Ezh Building Contracting LLC listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimThai Petroleum & Trading Co., Ltd. listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed
First listed
Victim claimGrupo PyD listed by gunra

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

The interactive view includes 57 dated events with category filters and paging.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

gunraCanonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...