All ransomware groups
icefire
11 tracked victims
·first seen 2022-08-20·last activity 2022-08-20Group profile
IceFire is a ransomware group first observed in 2022 that expanded to Linux in early 2023 by exploiting a vulnerability in IBM Aspera Faspex (CVE-2022-47986), targeting media and entertainment organizations in Turkey, Iran, Pakistan, and the UAE using double-extortion tactics.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2022-08-20 |  *.algotrader.comalgotrader.com | Technology | |
| 2022-08-20 |  *.bestservers.probestservers.pro | Technology | |
| 2022-08-20 |  *.iperactive.com.ariperactive.com.ar | Technology | |
| 2022-08-20 |  *.cco1.comcco1.com | Technology | |
| 2022-08-20 |  *.vps-vds.comvps-vds.com | Technology | |
| 2022-08-20 |  *.guneshosting.comguneshosting.com | Technology | |
| 2022-08-20 |  *.kodhosting.comkodhosting.com | Technology | |
| 2022-08-20 |  *.kru.ac.thkru.ac.th | Education | |
| 2022-08-20 |  *.directfn.netdirectfn.net | Financial Services | |
| 2022-08-20 |  *.feesh.chfeesh.ch | Retail & E-Commerce | |
| 2022-08-20 |  *.skifgroup.comskifgroup.com | Manufacturing |