Ransomware Group

Space Bears

Status: active • First seen 2024-0450+ known victims

Space Bears is a repackaged version of the old Phobos ransomware with a new negotiation website. They target smaller businesses that might be easier to pressure into paying.

Overview

Space Bears is a ransomware operation using modified Phobos code with a unique negotiation platform. The group targets small and medium-sized businesses.

Target Industries

SMB, Manufacturing, Retail, Professional Services

How They Attack

  • Phobos variant
  • Unique negotiation platform
  • SMB targeting
  • Double extortion

Notable Victims

Small manufacturers (2024), Professional services firms

Is your business exposed?

How to Protect Against Space Bears

  1. 1.

    Monitor for Phobos indicators

  2. 2.

    Implement SMB security basics

  3. 3.

    Prepare negotiation procedures

MITRE ATT&CK Techniques

T1486, T1021.001, T1078, T1567

Related Groups

Phobos

Is your business exposed?

Check if your company data is circulating on the dark web

Free scan • No credit card required