Threat Group Profile
spacebears
● Active — last 30 days
Victim claims
33
First seen
Apr 2026
Last activity
22 Aug 2026
Tracked since
Apr 2024
Group overview
Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.
Preferred targets
Business Services · 6
Technology · 5
Manufacturing · 3
Healthcare · 3
Retail & E-Commerce · 2
Consumer Services · 2
Most targeted countries
US · 6
IT · 6
BR · 4
DE · 3
CH · 2
CN · 1