space bears
💰 eCrimeMotivation: financialLast active: 2026-08-12First seen: 2026-04-07
0
linked CVEs
Also known as
spacebears
Targeted industries
Agriculture and Food ProductionBusiness ServicesHealthcareHospitality and TourismManufacturingNot FoundTechnology
Targeted regions
AUBEBRCHESFRIEITTCUS
SpaceBears is a ransomware group believed to be based in Moscow, Russia, that has taken credit for several high-profile cyberattacks while primarily operating as a Data Broker. They currently list eight organizations on their Data Leak Site, focusing on medium to small-sized targets. Their methods suggest a reliance on basic extortion strategies rather than sophisticated malware tactics, with no advanced techniques or indicators of ransomware detected.
Source: misp_galaxy · Collected: 2026-08-12
⚡ Vulnerabilities & Exploits0 CVEs
threat_actor_cve → cves / exploits.cve_ids
No CVE correlation on record for this actor yet.
🔍 Detection Coverage0 Sigma
Derived from linked CVEs — not a direct actor match
No Sigma rules mapped via this actor's CVEs yet.
🧬 YaraComing soon
🛰️ Infrastructure & IOCs0
No IOCs linked to this actor yet.
📰 Threat Intel Coverage0
Digest reports mentioning this actor (incl. aliases)
No threat intel digest coverage found.