icefire
Activity analysis
HackerFeeds has tracked 11 victims claimed by icefire since August 2022 — ranking #215 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in August 2022. Its most-targeted sector is Technology (7 victims), followed by Manufacturing (1).
Victims per year
- 202211
Top sectors
- Technology7
- Manufacturing1
- Financial Services1
- Education1
- Consumer Services1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
IceFire is a ransomware group first observed in 2022 that expanded to Linux in early 2023 by exploiting a vulnerability in IBM Aspera Faspex (CVE-2022-47986), targeting media and entertainment organizations in Turkey, Iran, Pakistan, and the UAE using double-extortion tactics.
Recent victims
No victims tracked yet.

