All Resources. Research, Reports And News.
Everything Brandefense publishes in one place: blog posts, threat research, reports, security news and whitepapers.
Malware Analysis Reports BugSleep Backdoor Technical Analysis Technical analysis of the BugSleep backdoor attributed to MuddyWater: file transfer, reverse shell commands, scheduled task persistence and detections. 
Security News React2Shell — The Day 5 Reality Check React2Shell (CVE-2025-55182) is a pre-auth RCE vulnerability in React Server Components with a CVSS 10.0 score. This blog examines the first five days after disclosure, how… 
APT Groups TraderTraitor: North Korea’s Crypto Heist Machine TraderTraitor—also known as Jade Sleet and UNC4899—is one of North Korea’s most aggressive financial APT groups. Responsible for major crypto thefts, including the $1.5B ByBit hack,… 
APT Groups Handala: The Rise of a Decentralized Pro-Palestinian Hacktivist Collective Handala is a pro-Palestinian hacktivist collective active since 2022, conducting defacements, DDoS attacks, and politically motivated data leaks targeting Israeli, U.S., and Western entities during regional… 
APT Groups Moonlight Tiger (APT-C-09, Patchwork, Dropping Elephant): India’s Silent Espionage Arm in the Digital Battlefield Moonlight Tiger (APT-C-09) is a long-running India-linked cyber-espionage group conducting spearphishing, modular malware campaigns, and intelligence-gathering operations across South and East Asia. Targeting government, defense, academic,… 
APT Groups Inside WageMole: North Korea’s Fusion of Cybercrime and Espionage WageMole is a North Korean APT active since 2018, operating at the intersection of cyber-espionage and financial theft. The group targets cryptocurrency, fintech, and defense sectors… 
APT Groups Inside Void Manticore: Iran’s Hybrid Hacktivist for Information Warfare Void Manticore is an Iran-aligned APT group conducting hybrid cyber operations, destructive wiper attacks, and politically motivated leak campaigns targeting Israel, NATO members, NGOs, and critical… 
APT Groups Sandworm (APT44): Russia’s Most Destructive Cyber Weapon Sandworm (APT44) is Russia’s most destructive state-sponsored cyber unit. Known for NotPetya, Industroyer, and AcidPour, the group targets critical infrastructure across Ukraine, NATO states, and Europe,… 
APT Groups APT37: North Korea’s Active Cyberespionage Group APT37 (Famous Chollima) remains one of North Korea’s most active and adaptive cyberespionage groups. This analysis highlights their 2025 evolution—cloud persistence, AI-driven social engineering, new RAT… All 98 pages
Our Research, By Email.
Questions About All Resources.
Last updated June 17, 2026-
Everything Brandefense publishes in one list: blog posts, threat intelligence research, reports, security news and whitepapers. Use the tabs to show one type only.
-
Type a word in the search box, pick a tab, or filter by year. Each item shows its type and date.
-
New items are added several times a month, newest first. Every item shows its date.
-
Some reports, such as the quarterly Ransomware Trends Report and the country reports, ask for a short form before the download opens. Blog posts, research and security news are read on the page.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box. The Privacy Policy is linked there.
-
Brandefense is an AI-driven threat intelligence company. Its platform covers cyber threat intelligence, digital risk protection and external attack surface management. You can request a demo on your own domain from the Request A Demo page.
-
The counter above the list shows the current total, and each tab shows its own count. The list includes blog posts, Threat Intelligence Researches, reports, security news and whitepapers. The newest come first.
-
Yes. The year filter lists every year with publications. You can also filter by type, such as Blog, Reports or Whitepapers.
-
Reports are in-depth research, such as quarterly ransomware trends, malware analyses and country reports. Whitepapers are deeper reads that explain attack methods and how to defend against them. Both are listed here.
-
It sits under Threat Intelligence Researches. These are deep dives into live threats. Use the type filter to show only that group.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.