Netskope Threat Labs

IceFire

ATP Sandbox Adv. HeuristicsAV

IceFire is a ransomware family that researchers observed returning to target Linux enterprise networks after its initial Windows campaigns.

First seen
May 2023
Last seen
October 2026
Alert Name
Gen:Variant.Ransomware.Linux.IceFire.1
Linux.Ransomware.IceFire
Trojan.Linux.Ransom.IceFire.CH