Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Reports Ransomware Trends Report | Q3 2026
The Brandefense Ransomware Trends Report Q3 2026 analyzes 2,898 confirmed ransomware incidents across 109 active threat groups, covering top operators, sector and country targeting, MITRE ATT&CK…
Reports Ransomware Trends Report | Q2 2026
The Brandefense Ransomware Trends Report Q2 2026 analyzes 2,509 confirmed ransomware incidents across 91 active threat groups, revealing the latest attacker trends, industry targeting, and strategic…
Reports Ransomware Trends Report | Q1 2026
A data-driven analysis of ransomware activity in Q1 2026, including threat actor rankings, sector targeting, and Q2 outlook.
Ransomware Trends Reports Ransomware Trends Report | Q3 2025
The Brandefense Ransomware Trends Report Q3 2025 reveals global ransomware activity, AI-driven extortion trends, and the latest threat actor insights shaping the cyber landscape.
Ransomware Trends Reports Ransomware Trends Report | Q2 2025
Ransomware Trends Report Q2 2025 – Key Insights from the Latest Threat Landscape
Ransomware Trends Reports Ransomware Trends Report | Q1 2025
Brandefense Ransomware Trends Report for Q1 2025: 38 active threat groups tracked across 22 industry sub-sectors, with the sectors and attacks hit hardest.
Ransomware Trends Reports Ransomware Trends Report | Q4 2025
An intelligence-driven analysis of global ransomware activity in Q4 2025—covering sectors, regions, threat actors, and exploited vulnerabilities.
Ransomware Trends Reports Ransomware Trends Report | Q3 2024
Q3 2024 ransomware intelligence — active RaaS operations, new entrants, targeted regions, double extortion trends, and emerging tactics documented by
Ransomware Trends Reports Ransomware Trends Report | Q2 2024
Q2 2024 ransomware activity — prominent threat actors, sector targeting trends, leak site intelligence, and defensive recommendations from Brandefense CTI and
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.