Ransomware needs a way in. Stolen credentials are the cheapest one.

Sicol Ransomware Attack

Ransomware victimRansomed

spacebearsGroup

—Country

Sep 26, 2026Discovered

Overview

View group profile

Industry

Government & Defense

Discovered

11 days ago

Confidence

90%

Severity

Medium

Status

Claimed

Threat group

spacebears

Total victims

First seen

Oct 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

Threat level

2.4/10

Aggressiveness5/10

Lethality0.1/10

Criticality2.1/10

Status breakdown

Data Leaked3.0%2

Claimed

this victim

97.0%65

Targeted sectors

Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Government & Defense

Known target sector

Other victims

View all (67)

Same group · spacebears

Sicol
—
Claimed
Tomix / Grupo JOPER
Portugal
Claimed
D-MAX Engineering, Inc
United States
Claimed
Sports Endeavors
United States
Claimed
Schwartz, Giannini, Lantsberger & Adamson
United States
Claimed
Studio Oculistico Ciraci
Italy
Claimed

Group activity

Monthly attacks · spacebears

total · avg 6.1/mo