Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA

The Gunra ransomware-as-a-service operation is exploiting old Fortinet firewall and VPN flaws to bypass MFA and target critical infrastructure. The group uses leaked Conti ransomware code to achieve success against these targets, according to a security report. The attacks leverage unpatched vulnerabilities in Fortinet appliances to gain initial access and deploy ransomware.