Skip to content
RansomwareFinancialModerate sophistication · Small team

Space Bears

Space Bears is a ransomware group with a financial motive, tracked by Brandefense. It targets 14 sectors, including Government and Technology, in 42 countries, including the United States and the United Kingdom.

Also known as
  • spacebears Team
  • Space Bear
Techniques
0
Exploited CVEs
No CVE data
First seen
Apr 29, 2024
Last seen
Sep 5, 2026
Record updated

Who They Target.

Labelsdata-leak-sitedouble-extortionlimited-sourceneeds-internal-validationphobos-affiliation-claimedransomware

About Space Bears.

Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.

Last updated Sep 29, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.