[threat-actors] Add SpaceBears

clusters/threat-actor.json

@@ -17304,6 +17304,17 @@
       },
       "uuid": "4f356e2b-8988-4d6b-84e8-d4362764aea0",
       "value": "SYLHET GANG-SG"
+    },
+    {
+      "description": "SpaceBears is a ransomware group believed to be based in Moscow, Russia, that has taken credit for several high-profile cyberattacks while primarily operating as a Data Broker. They currently list eight organizations on their Data Leak Site, focusing on medium to small-sized targets. Their methods suggest a reliance on basic extortion strategies rather than sophisticated malware tactics, with no advanced techniques or indicators of ransomware detected.",
+      "meta": {
+        "country": "RU",
+        "refs": [
+          "https://socradar.io/dark-web-profile-spacebears/"
+        ]
+      },
+      "uuid": "9900e010-f7ca-4354-b969-a5cd2b02f9d3",
+      "value": "SpaceBears"
     }
   ],
   "version": 320