Space Bears is a double-extortion ransomware group that emerged in April 2024, distinguished by a professional "corporate" aesthetic on its leak site, leveraging Phobos RaaS infrastructure and targeting small-to-medium organizations in manufacturing, technology, and healthcare across the US and Europe.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
Firma de detección defensiva para este grupo (úsala en tu EDR/SIEM). Fuente: ransomware.live.
/*
Space Bears ransomware
*/
rule SpaceBears_Ransomnote
{
meta:
author = "ransomware.live"
family = "ransomware.spacebears"
description = "Detects Space Bears ransomware ransom note"
date = "2026-05-04"
severity = 7
score = 70
strings:
$s1 = "Space Bears" ascii nocase
$s2 = "SpaceBears" ascii nocase
$s3 = "spacebears.onion" ascii nocase
condition:
any of them
}
SICOL – JS Cobranças e Serviços is a Brazilian company specializing in debt collection, credit management, and sales services. They blend digital automation with humanized customer support to help businesses recover debts and optimize their sales workflows.-Personal information of employees and clients -Financial documents -Other files [enlace omitido]
Stellar’s mission is to bring resilient connectivity to mobility, enterprise, and governments, by combining the very best of terrestrial (cellular, Wi-Fi, fiber) and satellite networks into one unbreakable solution.Stellar Telecommunications SAS ("Stellar"), was founded in 2021 as a truly European company: headquartered in Bordeaux, France, it also runs critical activities from Luxembourg.- Database- Production Config [enlace omitido]
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Sicol | BR | Manufacturing | — | 4 jun 2026 |
| Stellar | TC | Not Found | — | 2 jun 2026 |
| Sitran MG | BR | Business Services | — | 16 feb 2026 |
| Supercash (Alimentos Y Bebidas Premium) | MX | Agriculture and Food Production | — | 3 oct 2025 |
| SOP. Sistema Odontológico Privado | AR | Healthcare | — | 26 sept 2025 |
| Fattore Cosméticos Ltda | BR | Consumer Services | — | 25 sept 2025 |
| RAC Consultoria | DO | Business Services | — | 17 sept 2025 |
| Industrial Corona de México | MX | Manufacturing | — | 5 abr 2025 |
| SANTA MARIA LABORATORIO | BR | Healthcare | — | 22 ene 2025 |
| Thinkadam | CO | Technology | — | 29 abr 2024 |
| todoagro | EC | Agriculture and Food Production | — | 29 abr 2024 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
SITRAN - founded in 1971 in Belo Horizonte, is a company specializing in signage and the development of traffic management systems. The company stands out for the quality of its products and the use of advanced technology, serving both the national and international markets. Its experienced technical staff and modern equipment guarantee efficiency and speed in service execution. SITRAN focuses on customer satisfaction, with a constant commitment to improving its processes and meeting established deadlines.- Accounting- Contracts- Employee personal data- Databases [enlace omitido]
Supercash is a family business with over 40 years of experience. We specialize in distributing a wide variety of products for the hospitality industry. We offer convenient shopping and personalized service. We have five cash and carry centers located throughout the northern region: Oviedo, Avilés, Gijón, Valladolid, and León.They are clients of Gesimde Asociados S.L. The leak was made possible by this company.DatabasePersonal information of employees and clientsFinancial documents [enlace omitido]
The Private Dental System (SOP) is a dental care company located at 19 de Mayo Street, No. 14, Altos, in the city of Bahía Blanca. It was created specifically to provide comprehensive assistance to the various groups comprising the country's social security systems, medical institutions, labor unions, mutual insurance companies, and private companies. By properly administering the Benefit Agreements, with a sense of solidarity and at the lowest possible cost, it provides excellent dental care with full coverage of the Dental Nomenclature. The SOP also aims to prioritize dental prevention.The Private Dental System's coverage area covers the entire Argentine Republic, which is why we provide immediate dental care.- Patients' personal information- documents and medical histories- Company network database- Financial documents- Other information etc. [enlace omitido]
Fattore is a genuinely Brazilian company, founded in 2002. It manufactures hygiene and beauty products with a focus on the complete satisfaction of our customers.- Database- Financial documents- Personal information of employees and clients [enlace omitido]