Certainly a novel approach by a ransomware gang.

By Graham Cluley – Space Bear is a relatively new ransomware group that first appeared on the radar in April 2024. The gang, which is aligned to the Phobos ransomware-as-a-service group, steals sensitive data from organisations, encrypts victims’ computer systems, and demands that a ransom be paid for a decryption key or the data will be published on the dark web.

Space Bears has gained a certain amount of notoriety by the way in which it presents itself. Unlike other ransomware gangs, Space Bears presents a very “corporate” image of itself. For instance, on its leak website the Space Bears group uses stock images that you would more naturally associate with a corporation than a hacking gang.

This distinctive approach exhibits itself in webpages that ask, “Do you trust your data to this company?” in a style that would feel more normal on a company that was trying to sell you ransomware protection services than extort a ransom after stealing your data.  Read On: