MITRE ATT&CK

Gunra ransomware: what AA26-222A actually gives your detection engineers

Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.