icefire
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
55since 2022-08-18
Last post
08-27 13:41UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims55 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| *.algotrader.com | · Aug 27, 2022 | — |
| *.bestservers.pro | · Aug 27, 2022 | — |
| *.iperactive.com.ar | · Aug 27, 2022 | — |
| *.cco1.com | · Aug 27, 2022 | — |
| *.vps-vds.com | · Aug 27, 2022 | — |
| *.guneshosting.com | · Aug 27, 2022 | — |
| *.kodhosting.com | · Aug 27, 2022 | — |
| *.kru.ac.th | · Aug 27, 2022 | — |
| *.directfn.net | · Aug 27, 2022 | — |
| *.feesh.ch | · Aug 27, 2022 | — |
| *.skifgroup.com | · Aug 27, 2022 | — |
| P*CMaZOv-**** | · Aug 18, 2022 | — |
| Pphlz6&B%:7=**** | · Aug 18, 2022 | — |
| SaY@fXTS5xJV**** | · Aug 18, 2022 | — |
| p*GMz5VBONF~**** | · Aug 18, 2022 | — |
| pxh+c6Q_77LH**** | · Aug 18, 2022 | — |
| pxhGu5Vi@O=8**** | · Aug 18, 2022 | — |
| SM|bK2Xe0<GW**** | · Aug 18, 2022 | — |
| Slm|ON)HeLG{**** | · Aug 18, 2022 | — |
| pY(l8ZRVO:fN**** | · Aug 18, 2022 | — |
| pY(9z8V#Nmr?**** | · Aug 18, 2022 | — |
| pY(9?ZV_wE!^**** | · Aug 18, 2022 | — |
| Yo(Cu6#R:Pq^**** | · Aug 18, 2022 | — |
| WPh(caB_1EwI**** | · Aug 18, 2022 | — |
| WPh(caB_1@_X**** | · Aug 18, 2022 | — |
| S[m4H<[~V20M**** | · Aug 18, 2022 | — |
| SVRLxrxtuNzT**** | · Aug 18, 2022 | — |
| SY{3{3kp9~k#**** | · Aug 18, 2022 | — |
| W*h(zqtB%7n0**** | · Aug 18, 2022 | — |
| WSC9aa#Vm%cA**** | · Aug 18, 2022 | — |
| WPGh5ZD#7@:D**** | · Aug 18, 2022 | — |
| pxCM5cDBO%[]**** | · Aug 18, 2022 | — |
| pY(C88t_mwZK**** | · Aug 18, 2022 | — |
| PX995qBVNOAn**** | · Aug 18, 2022 | — |
| YoGMzcV#1Ik2**** | · Aug 18, 2022 | — |
| WxlAza#_11wx**** | · Aug 18, 2022 | — |
| W<++6aRRE%DN**** | · Aug 18, 2022 | — |
| PPMCzuD&7mgQ**** | · Aug 18, 2022 | — |
| <S9h58_QO_T>**** | · Aug 18, 2022 | — |
| p<GGZ5t#7@]p**** | · Aug 18, 2022 | — |
| WP(Cz?tR%%@***** | · Aug 18, 2022 | — |
| pXhMc6_V@%7n**** | · Aug 18, 2022 | — |
| pS!(6ZDV%@Xo**** | · Aug 18, 2022 | — |
| WY9l56tt1Oa9**** | · Aug 18, 2022 | — |
| Sk-GMDV=$yQv**** | · Aug 18, 2022 | — |
| pxh+caBB%7ye**** | · Aug 18, 2022 | — |
| WS((auQQO@Vz**** | · Aug 18, 2022 | — |
| S?nISDNf^1[Z**** | · Aug 18, 2022 | — |
| Pp9!86t#:OPi**** | · Aug 18, 2022 | — |
| SeEI?b*2ZR*1**** | · Aug 18, 2022 | — |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .