Gunra Targets Primary and Disaster-Recovery Backups Before File Encryption

Gunra ransomware operators are taking a destructive approach designed to remove every easy recovery path before locking victim files. In a documented incident, the group deleted backup and archived data stored at both the primary data center and the disaster-recovery site before and after deploying ransomware. The tactic greatly increases pressure on victims because even organizations with standard backup plans may find their recovery infrastructure unavailable. Gunra emerged…

Diamond Model