Log in Request a demo

All Resources. Research, Reports And News.

Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.

All880 Blog497 Threat Intelligence Researches165 Reports64 Security News273 Whitepapers7
880 itemsPage 35 of 98
PlushDaemon APT card representing a China-aligned cyber espionage threat actor APT Groups PlushDaemon APT: An In-Depth Analysis of a Stealthy China-Aligned Cyber Espionage Group PlushDaemon is a stealthy, China-aligned advanced persistent threat (APT) group focused on long-term cyber espionage. Active since the early 2010s, the group primarily targets government, defense,… Jan 05, 2026Read → Smishing Triad cybercrime group using SMS phishing and brand impersonation tactics APT Groups Smishing Triad: A Global Cybercrime Syndicate Targeting Postal and Financial Networks The Smishing Triad is a high-risk, financially motivated cybercrime syndicate operating smishing-as-a-service campaigns since 2022. By impersonating postal, banking, and public service brands, the group targets… Jan 04, 2026Read → Silent Chollima APT45 APT card showing a North Korea–linked threat actor focused on cyber espionage and revenue generation APT Groups Silent Chollima: North Korea’s Dual-Track Cyber Weapon Silent Chollima (APT45), also known as Onyx Sleet, is a North Korea–linked threat actor operating at the intersection of cyber espionage and financially motivated attacks. Active… Dec 30, 2025Read → OldGremlin APT threat group profile visual representing a Russian-speaking hybrid ransomware and espionage actor APT Groups OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT OldGremlin is a high-risk, Russian-speaking threat group operating since 2020 that blends APT-level stealth, long-term reconnaissance, and double-extortion ransomware. Its precision-driven campaigns pose significant risk to… Dec 29, 2025Read → OilRig APT34 Helix Kitten Iran-linked cyber espionage threat actor targeting energy and defense sectors APT Groups OilRig: Iran’s Persistent Espionage Arm in Cyberspace OilRig, also known as APT34 or Helix Kitten, is one of Iran’s most persistent cyber espionage groups. Active since 2014, the group targets energy, defense, and… Dec 24, 2025Read → Callisto APT cyber espionage group – Russia-linked threat actor targeting NATO and government institutions APT Groups Callisto APT: Russia’s Persistent Espionage Operator Callisto is a long-running Russia-linked APT group specializing in cyber espionage against NATO, EU, and government organizations. This analysis explores its identity, tactics, cloud-focused operations, and… Dec 23, 2025Read → Crafty Camel APT card representing Iran-linked cyber espionage group targeting government and energy sectors APT Groups Crafty Camel APT: Iran’s Expanding Espionage Footprint in the Modern Cyber Battlespace Crafty Camel is an Iran-aligned advanced persistent threat leveraging spearphishing, cloud credential theft, and identity-centric attacks to conduct long-term cyber espionage. Active since 2017, the group… Dec 18, 2025Read → Angry Likho APT group profile representing a pro-Russian cyber espionage threat APT Groups Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe Angry Likho is a rapidly evolving pro-Russian cyber espionage group targeting Eastern European governments and defense organizations. This in-depth threat intelligence report analyzes its motivations, TTPs,… Dec 17, 2025Read → GALLIUM APT group profile showing China-linked cyber espionage targeting telecom and government networks APT Groups GALLIUM APT: What MITRE ATT&CK Says GALLIUM is a cyberespionage group that MITRE ATT&CK says has been active since at least 2012, mainly targeting telecom, finance and government. See what is confirmed… Dec 16, 2025Read →
All 98 pages
Newsletter

Our Research, By Email.

FAQ

Questions About All Resources.

Last updated June 17, 2026

  • Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.

  • Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.

  • New items are added several times a month, newest first. Every item shows its date.

  • Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.

  • Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.

  • Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.

  • The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.

  • Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.

  • Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.

  • It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.

Research Is General. Your Exposure Is Not.

A demo of the platform, run on your own domain.

Request a demo