US and South Korea Warn of Gunra Ransomware

US federal agencies and the South Korean National Policy Agency have issued a warning regarding the Gunra ransomware. This malware targets government agencies and critical infrastructures worldwide. The security alert was published on August 10, 2026, urging organizations to secure their systems. The Gunra ransomware is known for encrypting data and demanding ransom payments.

Attacks have increased in recent weeks, underscoring the urgency of the warning. Experts fear that attackers are exploiting vulnerabilities in IT systems to gain access to sensitive information. Authorities in the US and South Korea have provided specific recommendations to defend against the ransomware. These include regularly updating software and operating systems, as well as implementing multi-factor authentication processes. These measures aim to reduce the attack surface for potential cybercriminals.

The warning comes at a time when cybercrime is on the rise globally. According to the Cybersecurity & Infrastructure Security Agency (CISA), there was a 30% increase in ransomware attacks in 2025 compared to the previous year. CISA has emphasized that the threat of ransomware exists not only for government agencies but also for businesses and individuals. In addition to technical recommendations, authorities have highlighted the importance of employee training. Awareness programs are intended to ensure that employees can recognize and report potential phishing attempts.

These trainings are a crucial component of the security strategy against cyberattacks. The Gunra ransomware has already carried out several high-profile attacks on government agencies in various countries. Reports indicate that data from over 100,000 users has been compromised in recent months. The attackers are demanding ransoms in the form of cryptocurrencies to restore the encrypted data. The US government has announced plans to enhance collaboration with international partners to combat the threat of ransomware.

This includes sharing information about threats and developing joint strategies to counter cyberattacks. The collaboration is also intended to improve responsiveness to future attacks. The warning about Gunra ransomware is part of a broader initiative to strengthen cybersecurity in the US and South Korea. Both countries have invested significant resources in improving their cyber defenses in recent years. The US government allocated over $10 billion for cybersecurity initiatives in 2025.

Authorities are urging all organizations to take immediate action to protect their systems. This includes reviewing security protocols and ensuring that all software is up to date. The deadline for implementing these measures has been set for August 31, 2026.