Signalis
sign in--:--:--UTC
Threat actors

Spacebears

☆ pin
Reports
28
First seen
May 12, 2026
Last seen
Aug 12, 2026
Motivation
Financial

Targeting

Sectors
Manufacturing ×6Technology ×4Professional Services ×2Retail & E-commerce ×2Healthcare ×2Transport & Logistics ×1Telecommunications ×1Hospitality ×1
Victim regions
×1
×4
Italy×4
United States×4
Brazil×3
Germany×2
Switzerland×2
China×1
South Korea×1
United Kingdom×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×61ip_v4 ×16url ×11hash_sha1 ×5hash_sha256 ×4hash_md5 ×2

Indicator values are available on Pro and via the API.

Recent reports

High

Spacebears claims Basso Fedele & Figli S.r.l. (Olio Basso) / Villa Raiano in ransomware extortion

ransomware.liveHigh

Spacebears claims Elixi International SA pharmaceutical distributor breach

ransomware.liveHigh

Spacebears claims Hitech Distribuzione Informatica as ransomware victim

ransomware.liveHigh

Spacebears publishes PontoBR Sistemas as ransomware victim

ransomware.liveHigh

Spacebears publishes StellarRAD Systems as ransomware victim

ransomware.liveHigh

Spacebears ransomware gang publishes DoAllTech as victim

ransomware.liveHigh

Spacebears publishes Anpra SAS as ransomware victim

ransomware.liveHigh

Spacebears ransomware gang publishes BiesSse Group as victim

ransomware.liveHigh

Spacebears publishes Techpol-System as ransomware victim

ransomware.liveMedium

Spacebears ransomware gang publishes Turbosoft as victim

ransomware.liveHigh

Spacebears ransomware gang publishes Biessse as victim

ransomware.liveHigh

Spacebears ransomware gang publishes Fitcrunch as new victim

ransomware.liveHigh

Spacebears claims Blenheim luxury property firm in UK ransomware extortion

ransomware.liveHigh

Spacebears ransomware gang publishes Salters Propane as victim

ransomware.liveHigh

Spacebears publishes Chebib Control as victim

ransomware.liveHigh

Spacebears publishes Gerencial Contábil as ransomware victim

ransomware.liveHigh

Spacebears claims ECOVACS breach; ~2TB data stolen

ransomware.liveHigh

Spacebears publishes Cattani S.p.A. as ransomware victim

ransomware.liveHigh

Spacebears ransomware claims Lösing Filtertechnik

ransomware.liveMedium

Spacebears claims Sicol victim on ransomware.live

ransomware.liveHigh

Spacebears publishes Geske Haus- und Versorgungstechnik GmbH as ransomware victim

ransomware.liveHigh

Spacebears ransomware gang publishes new victim: Stellar

ransomware.liveHigh

Spacebears publishes Ridge Law Firm as ransomware victim

ransomware.liveHigh

Spacebears publishes Gestordes as ransomware victim

ransomware.liveHigh

Spacebears ransomware publishes Filabé as victim

ransomware.liveHigh

Spacebears claims compromise of Hunter (email intelligence platform)

ransomware.liveHigh

Spacebears publishes BASE S.p.A. as ransomware victim

ransomware.liveHigh

Spacebears publishes SmilePoint Dental Group as ransomware victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans