Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Gunra
As of Oct 19, 2026, Gunra has listed 60 confirmed victims on its leak site since Apr 23, 2025, 0.2% of all victims tracked by Brandefense. Its most targeted country is Brazil (11.7% of its victims) and its most targeted sector is Consulting.
Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 60
- Rank By Victims
- #94
- Last Leak-Site Post
- Sep 4, 2026
- Top Country
- Brazil
- Top Sector
- Consulting
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 3 |
| June 2026 | 6 |
| July 2026 | 4 |
| August 2026 | 4 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 1 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 15 |
| April 2026 | 8 |
| May 2026 | 3 |
| June 2026 | 6 |
| July 2026 | 4 |
| August 2026 | 4 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| April 2025 | 5 |
| May 2025 | 6 |
| June 2025 | 2 |
| July 2025 | 0 |
| August 2025 | 3 |
| September 2025 | 1 |
| October 2025 | 1 |
| November 2025 | 0 |
| December 2025 | 1 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 15 |
| April 2026 | 8 |
| May 2026 | 3 |
| June 2026 | 6 |
| July 2026 | 4 |
| August 2026 | 4 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
Latest Gunra Victims.
Search all 60 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Blanco & Etcheverry blancoetcheverry.com | UYUruguay | Legal Services | Not stated | |
| BOMOHSA bomohsa.com | HNHonduras | Manufacturing | Not stated | |
| PT All Cosmos Biotek allcosmos.com | IDIndonesia | Manufacturing | Not stated | |
| worldtube worldtube.co.kr | KRSouth Korea | Technology | Not stated | |
| Siam Stabilizers and Chemicals Co., Ltd. / SSC siamstabilizers.com | THThailand | Manufacturing | Not stated | |
| Siam Stabilizers and Chemicals Co., Ltd. / SSC sakai-ssc.com | THThailand | Manufacturing | Not stated |
How They Operate.
Gunra's threat actor profile lists 26 ATT&CK techniques, 8 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Gunra Targets.
History.
First seen in Brandefense data
First confirmed victim listed on its leak site
Busiest month on record: 15 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.