What is IronFox and which organization or company develops it?

Checked on December 8, 2025
Disclaimer: Factually can make mistakes. Please verify important information or breaking news. Learn more.

Executive summary

IronFox, in the contexts covered by available sources, most prominently refers to an open-source, privacy-focused Android web browser developed and distributed by a community project calling itself IronFox OSS (a fork of the Mull browser and based on Firefox) [1] and is also the name of a separate video‑game studio, Iron Fox Games, based in Charlottetown [2] [3]. The browser project’s source and releases are hosted by IronFox OSS on GitLab/GitHub/Codeberg and the team describes itself as “the developers of IronFox” [4] [5] [1].

1. IronFox the browser: an independent OSS fork built around privacy

IronFox is presented in multiple repositories and release pages as “Private, secure, user first web browser for Android,” developed by an organization or collective that uses the name IronFox OSS and maintains code mirrors on GitLab, GitHub and Codeberg [4] [6] [1]. The project explicitly identifies itself as a fork of Divested Computing Group’s Mull Browser and as based on Mozilla Firefox; project pages recommend installing from their repositories or F‑Droid and urge checksum/signature verification [1] [7].

2. Who develops the browser: “IronFox OSS” as the developer identity

The browser’s developer is listed as IronFox OSS across code-hosting profiles and package descriptions; the GitHub organization page reads “The developers of IronFox: The private, secure, user first web browser for Android” and the project is described as “IronFox OSS / IronFox” in official release records [5] [6] [4]. Releases and an Internet Archive entry point to the same source tree, indicating an organized open‑source group rather than a commercial corporation [8] [9].

3. Provenance and lineage: Mull Browser → IronFox, and a Mozilla base

Multiple sources report that IronFox is a fork of the Mull browser (associated with DivestOS/Divested Computing Group) and is itself built on Mozilla Firefox code; one distributor page also states the project is licensed under GNU AGPLv3 and explicitly says it is not affiliated with or endorsed by Mozilla or DivestOS [7] [1] [10]. That lineage explains the project’s emphasis on privacy and hardening against tracking.

4. Distribution, updates and ecosystem pointers

IronFox’s maintainers publish releases (for example v134.0.2‑1 and later builds) and recommend installation from their GitLab releases, their F‑Droid repository, Accrescent, or Obtainium; they also provide nightly builds and mirrored repositories so users can verify and obtain updates [9] [1] [11]. Third‑party APK aggregators describe it as “privacy and security‑oriented” and cite its Mull‑fork origins [7].

5. IronFox the company: unrelated game studio with similar name

A distinct entity, Iron Fox Games, is a Charlottetown video‑game development studio that uses the name Iron Fox and was founded by industry veterans; local reporting and the studio’s website position it squarely in game development and live operations — unrelated to the IronFox browser project [2] [3]. Sources indicate separate businesses or projects share similar names; the browser’s developer identity is IronFox OSS, not Iron Fox Games [5] [2].

6. Conflicting or absent information and limitations

Available sources consistently identify the browser developer as IronFox OSS and document repository locations and release notes [4] [5] [6] [1]. No source in the provided set names individual maintainers, corporate registration details, or a legal entity behind “IronFox OSS”; available sources do not mention formal company registration, funding, or an organizational structure beyond the project’s GitLab/GitHub presence [4] [5] [1] [8]. Claims about code provenance beyond “fork of Mull” and “based on Firefox” are supported in the sources cited [7] [1].

7. What to watch for and verification steps

Because the project is distributed via multiple mirrors and third‑party APK sites, best practice is to verify package IDs and signing‑certificate checksums before installation, as the project itself advises [1]. Third‑party packaging pages repeat the Mull→IronFox lineage and AGPL license claims but also warn IronFox is not officially affiliated with Mozilla or DivestOS [7].

Conclusion: “IronFox” most reliably refers to an open‑source, privacy‑oriented Android browser developed and released by a group calling itself IronFox OSS (a Mull fork based on Firefox) [1] [7]. A separate, unrelated company called Iron Fox Games exists in the video‑game sector and should not be conflated with the browser project [2] [3].

Want to dive deeper?
What capabilities and features does IronFox offer for cyber operations?
Which countries or threat actors are associated with deploying IronFox?
Has IronFox been linked to any known cyberattacks or espionage campaigns?
Are there forensic indicators or IOCs to detect IronFox infections?
How does IronFox compare to other commercial spyware and nation-state tools?