Threat Group Profile
spacebears
● Active — last 30 days
Victim claims
22
First seen
Apr 2026
Last activity
26 Jun 2026
Tracked since
—
Group overview
Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.
Preferred targets
Business Services · 6
Manufacturing · 3
Consumer Services · 2
Healthcare · 2
Energy · 1
Agriculture and Food Production · 1
Most targeted countries
US · 5
BR · 3
IT · 3
DE · 2
AU · 1
CN · 1
