Skip to content
NewCybercrime Report 2026 · Eight Chapters · A Post Is Not An Incident → Explore The ChaptersCybercrime Report 2026 → Explore
Reports · 64 Items

Reports. In‑Depth Research.

Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.

How did ransomware activity change between Q2 and Q3 2026?
Q2 2026The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups.
Q3 2026The Q3 2026 report analyzes 2,898 incidents across 109 groups.
Read The Q3 2026 Report →
Ransomware Trends Report | Q3 2026 2,898

All Reports. Three Groups.

43
  1. Malware Analysis ReportsRansomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies
  2. Malware Analysis ReportsFog Ransomware Technical Analysis
  3. Malware Analysis ReportsSecuring Election Processes Against Cyber Threats
  4. Malware Analysis ReportsBreaking the Angel’s Wing: Angel Drainer
  5. Malware Analysis ReportsHunters International Ransomware Technical Analysis
  6. Malware Analysis ReportsStrela Stealer Technical Analysis
  7. Malware Analysis ReportsGrandoreiro Trojan Technical Analysis
  8. Malware Analysis ReportsBugSleep Backdoor Technical Analysis
  9. Malware Analysis ReportsDonex Ransomware Technical Analysis
  10. Malware Analysis ReportsRugmi Loader Technical Analysis
  11. Malware Analysis ReportsOyster Backdoor Technical Analysis
  12. Malware Analysis ReportsXehook Stealer Technical Analysis
  13. Malware Analysis ReportsRokRAT Technical Analysis
  14. Malware Analysis ReportsStone Gaze: In-Depth Analysis of Medusa Ransomware
  15. Malware Analysis ReportsMint Stealer Technical Analysis
  16. Malware Analysis ReportsBlackBasta Ransomware Technical Analysis
  17. Malware Analysis ReportsKageNoHitobito Ransomware Technical Analysis
  18. Malware Analysis ReportsUNC1549 MINIBUS Backdoor Technical Analysis
  19. Malware Analysis ReportsXeno Rat Technical Analysis
  20. Malware Analysis ReportsPhemedrone Stealer Technical Analysis
  21. Malware Analysis ReportsCactus Ransomware Technical Analysis
  22. Malware Analysis ReportsSandworm’s New Arsenal: Kapeka Backdoor Technical Analysis
  23. Malware Analysis ReportsGotham Stealer Technical Analysis
  24. Malware Analysis ReportsTechnical Analysis of Cylance Ransomware

Questions and answers

01What reports does Brandefense publish?

Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.

02How often does the Ransomware Trends Report come out?

Every quarter. The newest edition on this page is Q3 2026, published in October 2026.

03Do I have to fill in a form to get a report?

The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.

04What does a malware analysis report cover?

Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.

05How do I get new reports by email?

Use the email box in the Our Research, By Email section on this page and tick the consent box.

06Where can I find official ransomware guidance?

CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.

CISA StopRansomware ↗FBI IC3 ↗
07How many reports are on the Reports page?

The page currently lists 64 public reports: 6 Country Reports, 15 Ransomware Trends Reports, 43 Malware Analysis Reports.

08What does the Q3 2026 Ransomware Trends Report cover?

It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.

09How did ransomware activity change between Q2 and Q3 2026?

The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.

10Is there a report on ransomware in healthcare?

Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.

Brandefense logo

Research Is General. Your Exposure Is Not.

A demo of the platform, run on your own domain.

Request A Demo →