Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Malware Analysis Reports Xehook Stealer Technical Analysis
Technical analysis of Xehook Stealer — credential theft capabilities, targeted data categories, MaaS distribution model, anti-analysis techniques, and IOCs for
Ransomware Trends Reports Ransomware Trends Report | Q2 2025
Ransomware Trends Report Q2 2025 – Key Insights from the Latest Threat Landscape
Malware Analysis Reports RokRAT Technical Analysis
Learn Technical Method of Operation DetailsYou will find the technical details of the RokRAT and details how state-sponsored threat actor APT37 use it.The report will show…
Country Reports Germany Threat Landscape Report
Germany cybersecurity threat landscape: phishing, infostealer malware and dark web data sales aimed at German financial institutions and their customers.
Malware Analysis Reports Stone Gaze: In-Depth Analysis of Medusa Ransomware
What You Will Find In This Report? Learn Technical Method of Operation DetailsYou will find the technical details of the Medusa Ransomware and operational details of…
Country Reports Azerbaijan Threat Landscape Report
Azerbaijan cybersecurity threat landscape report: key incidents, state-backed groups, hacktivists and cybercriminals targeting government and key sectors.
Malware Analysis Reports Mint Stealer Technical Analysis
Mint Stealer analysis: how this MaaS malware steals browser and wallet data, evades detection and uses C2 servers, plus IOCs for security teams.
Ransomware Trends Reports Ransomware Trends Report | Q1 2025
Brandefense Ransomware Trends Report for Q1 2025: 38 active threat groups tracked across 22 industry sub-sectors, with the sectors and attacks hit hardest.
Malware Analysis Reports BlackBasta Ransomware Technical Analysis
Learn what Black Basta ransomware is, how it works and what our technical analysis report covers: tactics, detections, IoCs and response advice.
All 8 pages
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.