Icefire
Icefire is a ransomware group with a financial motive, tracked by Brandefense. It targets the Diplomacy sector in 4 countries, including Türkiye and the United Arab Emirates.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Mar 29, 2023
- Last seen
- Mar 29, 2023
- Record updated
Who They Target.
Sectors · 1
Countries · 4
Labelsransomware
About Icefire.
IceFire is a ransomware group first observed in 2022 that expanded to Linux in early 2023 by exploiting a vulnerability in IBM Aspera Faspex (CVE-), targeting media and entertainment organizations in Turkey, Iran, Pakistan, and the UAE using double-extortion tactics.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.