CISA, FBI and partner agencies issue a Gunra ransomware advisory, urging protection of backups
The advisory describes double extortion and backup destruction risks, and recommends patching entry points, isolating backups and segmenting networks.
CISA, FBI and partner agencies issued a joint Gunra advisory on 10 August, describing double extortion combining encryption with data theft. It also notes that attackers may disable or damage backups.
Official guidance prioritises patching known exploited vulnerabilities in internet-facing systems, implementing and testing isolated backups, and using network segmentation to limit lateral movement.
The backup platform itself also needs protection. Review administration privileges, storage locations and recovery exercises, and confirm whether the original advisory applies to your environment.
Original sources
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
IllustrationLiteLLM explains package compromise: exposed keys must be revoked to complete the response
Illustration