Gunra Ransomware Group Unveils Efficient Linux Variant
Trend Micro, Tuesday, July 29th, 2025
This blog discusses how Gunra ransomware's new Linux variant accelerates and customizes encryption, expanding the group's reach with advanced cross-platform tactics.
Gunra ransomware was first observed in April 2025 in a campaign that targeted Windows systems using techniques inspired by the infamous Conti ransomware. Our monitoring of the ransomware landscape revealed that threat actors behind Gunra have expanded with a Linux variant, signaling a strategic move toward cross-platform targeting.