Gunra Ransomware Evolves From Conti-Based Locker Into RaaS Operation

The report describes Gunra, a ransomware group that evolved into a Ransomware-as-a-Service platform after replacing Conti-based code with a custom encryptor; it has claimed 32 victims by March 2026, recruits affiliates on dark web forums, provides a feature-rich affiliate panel (including white‑labeling and negotiation support), and upgraded its Linux payloads—raising the risk to organizations worldwide, notably because the operation permits attacks on critical infrastructure and enables affiliates to rebrand malware.