SpaceBears
- First seen
- 2022-03-15 00:00:00
- Origin
- RU
- Primary motivation
- financial-gain
- Sophistication
- minimal
- Resource level
- organization
- Actor type
- criminal
- Profile updated
- 2026-07-07 12:18:54
Targeted industries: professional-services technology-and-telecommunications media-and-entertainment
Context
SpaceBears is a ransomware group believed to be based in Moscow, Russia, that has taken credit for several high-profile cyberattacks while primarily operating as a Data Broker. They currently list eight organizations on their Data Leak Site, focusing on medium to small-sized targets. Their methods suggest a reliance on basic extortion strategies rather than sophisticated malware tactics, with no advanced techniques or indicators of ransomware detected.
Reports & references
- socradar.io — Dark Web Profile Spacebears (report)