A joint warning issued by US and South Korean cyber agencies has highlighted the threat posed by the Gunra ransomware gang, which leverages tools linked to North Korean government hackers to target critical infrastructure and government organizations. Gunra's attacks have spanned multiple sectors, including academia, finance, healthcare, and utilities, with a global reach that encompasses Africa, the Americas, and Asia. The gang's modus operandi involves recruiting ethical hackers and penetration testers, underscoring the blurring of lines between legitimate and malicious activities1. Gunra's ability to exploit vulnerabilities in various industries has significant implications for operational resilience planning. The fact that Gunra has been able to recruit skilled hackers and utilize state-sponsored tools to carry out its attacks makes it a formidable threat, so practitioners must prioritize proactive defense strategies to mitigate the risk of ransomware attacks.