Gunra is a 2025 ransomware group known for double-extortion tactics and a strict five-day payment deadline.
Analyst brief
Gunra is a financially motivated ransomware group that emerged in April 2025. It targets organizations across multiple countries including Uruguay, Indonesia, South Korea, United States, Spain, and Brazil, focusing on sectors such as Technology, Manufacturing, and Financial Services. The group employs double-extortion tactics with separate Windows and Linux ransomware variants and enforces a strict five-day payment deadline. Defenders should prioritize monitoring for cross-platform ransomware deployment and be prepared for aggressive extortion tactics tied to the five-day deadline.
gunra
activecrime
Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.