All Resources. Research, Reports And News.
Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.
APT Groups APT-C-36: Latin America’s Persistent Cyber-Espionage Force APT-C-36, also known as Blind Eagle, is a Colombia-linked cyber-espionage group active since 2018. Primarily targeting government and financial sectors in Latin America, the actor leverages… 
Malware Analysis Reports Hunters International Ransomware Technical Analysis Technical analysis of Hunters International ransomware: a Rust-based RaaS sample that uses AES and RSA encryption, adds .locked and leaves a ransom note. 
Malware Analysis Reports Strela Stealer Technical Analysis Strela stealer is Windows malware that steals Outlook and Thunderbird logins. See what the technical report covers: methods, detections and IoCs. 
APT Groups Inside the Operations of Inception Framework: A Decade of Stealth, Espionage, and Global Targeting Inception Framework is a long-running Russian-speaking cyberespionage group focused on government, diplomatic, and defense targets using stealthy spearphishing and cloud-based intrusion techniques. 
APT Groups APT27 APT27 is a long-running China-aligned cyber espionage group targeting governments, defense contractors, and critical infrastructure through stealthy, high-impact operations. 
APT Groups APT3 (BORON): A Pioneering China-Aligned Cyber Espionage Group APT3 (BORON) is one of the earliest China-aligned APT groups, known for exploit-driven espionage campaigns targeting defense, advanced manufacturing, and government sectors. 
APT Groups FIN11 Threat Group Profile FIN11 is a globally active, financially motivated cybercrime group known for large-scale phishing campaigns, malware distribution, and ransomware ecosystem enablement. 
Blog From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways Shadow AI is emerging as the next evolution of Shadow IT. This analysis reveals how misconfigured Clawdbot agent gateways expose LLM keys, corporate data, and integration… 
APT Groups APT35: Iran’s Persistent Cyber Espionage Force APT35, also known as Charming Kitten, is an Iranian state-linked cyber espionage group active since 2011, conducting phishing, credential theft, and influence operations against political, academic,… All 98 pages
Our Research, By Email.
Questions About All Resources.
Last updated June 17, 2026-
Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.
-
Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.
-
New items are added several times a month, newest first. Every item shows its date.
-
Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.
-
Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.
-
Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.
-
It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.