On 10 August 2026, the FBI, CISA, the Department of Defense Cyber Crime Center, the NSA, the US Secret Service and the Republic of Korea's National Police Agency released a joint advisory about Gunra ransomware.
What Is Confirmed
- Gunra first emerged in April 2025 as a double-extortion variant derived from leaked Conti ransomware source code.
- As of early 2026 it expanded into a structured ransomware-as-a-service affiliate programme advertised on dark web forums.
- Double extortion means they encrypt your files and steal a copy, then threaten to publish it if you do not pay.
Why Double Extortion Changes Your Backup Plan
This is the part small businesses consistently get wrong. A good backup defeats the encryption half of the attack — you restore and move on. It does nothing about the stolen copy. If client records, financials or medical data were taken, you may have a notification obligation regardless of whether you paid or restored.
The conclusion is not "backups are pointless." It is that backups are necessary but not sufficient. Preventing the intrusion in the first place is what protects the data.
Defences That Actually Work for a Small Office
- Multi-factor authentication everywhere, especially email and remote access. This blocks the most common entry route.
- Offline or immutable backups. A backup drive permanently connected to the PC gets encrypted along with everything else.
- Patch promptly. Most intrusions use known vulnerabilities, not new ones.
- Disable RDP exposed to the internet or put it behind a VPN.
- Test a restore. An untested backup is a hope, not a plan.
MediaVision Technical Analysis
Read the full advisory at CISA — it is written for defenders and lists specific indicators. If you run a business in Orange County and are unsure whether your backup would survive an attack like this, we will audit it. The test we run is simple: unplug everything, and see whether you can rebuild.
If you are hit: disconnect from the network immediately, do not wipe the machine, and call for help. Evidence on that drive matters.
