Gunra pre-exfil archive staging: oversized 7-Zip/WinRAR w/ outbound activity

Duo Tech@duotech

•updated Aug 10, 2026•8•0•11

Detects unusually large 7-Zip/WinRAR archive creation from non-standard staging directories followed by outbound network activity, consistent with Gunra's data-staging step before double-extortion exfiltration.