Skip to content

Space Bears

Space Bears is a ransomware group observed targeting organizations in Japan in the first half of 2025.

Profile source: Mallory opens in a new tab

Space Bears

Family profile

Space Bears is a ransomware group observed targeting organizations in Japan in the first half of 2025. In the provided reporting, it is listed among active ransomware groups affecting Japanese organizations and was attributed with two confirmed incidents. The broader context indicates ransomware activity in Japan primarily affected small and medium-sized enterprises, with manufacturing the most targeted sector, but no specific intrusion methods, malware family details, technical capabilities, victimology beyond incident counts, associated threat actors, or indicators of compromise are provided specifically for Space Bears in the source content.

Operational record

1
YARA rules
1
Leak sites
1 available

Defense Evasion

  • Defender Control

LOLBAS

  • BCDEdit
  • VmConnect
  • WMIC
  • fsutil
  • netsh
  • vssadmin

Recent claims

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.