Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Malware Analysis Reports Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies
What this report covers This report looks at ransomware against the U.S. healthcare sector, where attacks have caused large financial losses, service disruption and risk to…
Malware Analysis Reports Fog Ransomware Technical Analysis
Fog ransomware technical analysis report: how it is believed to gain access, how it disrupts systems, plus detections, IoCs and response advice.
Malware Analysis Reports Securing Election Processes Against Cyber Threats
Analysis of cyber threats targeting electoral processes — influence operations, voter data exposure, infrastructure attacks, and threat intelligence strategies
Malware Analysis Reports Breaking the Angel’s Wing: Angel Drainer
Angel Drainer steals digital assets with phishing pages and rents its panel to other criminals. See what this report covers: methods, detections and IoCs.
Malware Analysis Reports Hunters International Ransomware Technical Analysis
Technical analysis of Hunters International ransomware: a Rust-based RaaS sample that uses AES and RSA encryption, adds .locked and leaves a ransom note.
Malware Analysis Reports Strela Stealer Technical Analysis
Strela stealer is Windows malware that steals Outlook and Thunderbird logins. See what the technical report covers: methods, detections and IoCs.
Malware Analysis Reports Grandoreiro Trojan Technical Analysis
Grandoreiro is a Delphi banking trojan seen since 2016 and aimed at banking users in Latin America and Iberia. See what this technical report covers.
Malware Analysis Reports BugSleep Backdoor Technical Analysis
Technical analysis of the BugSleep backdoor attributed to MuddyWater: file transfer, reverse shell commands, scheduled task persistence and detections.
Malware Analysis Reports Donex Ransomware Technical Analysis
What You Will Find In This Report? Learn Technical Method of Operation DetailsYou will find the technical details of the Donex ransomware, its functions, and details…
All 4 pages
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.