spacebears Ransomware
Tracked since Apr 29, 2024
2
victims recorded
2
in the last 30 days
0
CVEs
12h
Last activity
Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Defense Evasion
Defender Control
LOLBAS
BCDEdit · VmConnect · WMIC · fsutil · netsh · vssadmin
Most affected countries (30 days)
- United States1
- Italy1
Most affected sectors (30 days)
- Healthcare2
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live