icefire
IceFire is a ransomware group first observed in 2022 that expanded to Linux in early 2023 by exploiting a vulnerability in IBM Aspera Faspex (CVE-2022-47986), targeting media and entertainment organizations in Turkey, Iran, Pakistan, and the UAE using double-extortion tactics.
No country data available
| Name | Country | Sector | Date |
|---|---|---|---|
| *.algotrader.com | — | Technology | 2022-08-20T09:50:02.102837+00:00 |
| *.bestservers.pro | — | Technology | 2022-08-20T09:50:00.658148+00:00 |
| *.iperactive.com.ar | — | Technology | 2022-08-20T09:49:59.138587+00:00 |
| *.cco1.com | — | Technology | 2022-08-20T09:49:57.523236+00:00 |
| *.vps-vds.com | — | Technology | 2022-08-20T09:49:55.763440+00:00 |
| *.guneshosting.com | — | Technology | 2022-08-20T09:49:54.156360+00:00 |
| *.kodhosting.com | — | Technology | 2022-08-20T09:49:52.642529+00:00 |
| *.kru.ac.th | — | Education | 2022-08-20T09:49:50.882177+00:00 |
| *.directfn.net | — | Financial Services | 2022-08-20T09:49:46.719633+00:00 |
| *.feesh.ch | — | Consumer Services | 2022-08-20T09:49:45.061614+00:00 |
| *.skifgroup.com | — | Manufacturing | 2022-08-20T09:49:42.447167+00:00 |
Data from ransomware.live