{
  "slug": "gunra",
  "group": "gunra",
  "name": "gunra",
  "note": null,
  "attck": [],
  "activity": {
    "postings": 3,
    "first": "2026-08-18",
    "last": "2026-09-04",
    "countries": {
      "UY": 1,
      "VE": 1,
      "HN": 1
    },
    "sectors": {
      "services": 1,
      "energy": 1,
      "unknown": 1
    },
    "recent": [
      {
        "date": "2026-09-04",
        "name": "Blanco & Etcheverry",
        "country": "UY",
        "sectors": [
          "services"
        ],
        "url": "https://www.ransomware.live/id/QmxhbmNvICYgRXRjaGV2ZXJyeUBndW5yYQ=="
      },
      {
        "date": "2026-09-04",
        "name": "Occidental",
        "country": "VE",
        "sectors": [
          "energy"
        ],
        "url": "https://www.ransomware.live/id/T2NjaWRlbnRhbEBndW5yYQ=="
      },
      {
        "date": "2026-08-18",
        "name": "BOMOHSA",
        "country": "HN",
        "sectors": [
          "unknown"
        ],
        "url": "https://www.ransomware.live/id/Qk9NT0hTQUBndW5yYQ=="
      }
    ]
  },
  "convergences": [],
  "reports": [
    {
      "url": "https://securelist.com/lazarus-operation-flashhole/121541/",
      "publisher": "Kaspersky Securelist",
      "published": "2026-10-21",
      "title": "Operation FlashHole: Lazarus breaks security, defies control",
      "origin": "feed",
      "primary": false
    },
    {
      "url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a",
      "publisher": "CISA",
      "published": "2026-08-05",
      "title": "#StopRansomware: Gunra Ransomware",
      "origin": "feed",
      "primary": true
    }
  ],
  "techniques": [],
  "cves": [],
  "indicators": {
    "list": [],
    "withheld": 0
  },
  "rules": [],
  "coverage": {
    "techniques": 0,
    "defendable": 0,
    "covered": 0,
    "uncovered": []
  }
}