Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Malware Analysis Reports KageNoHitobito Ransomware Technical Analysis
What You Will Find In This Report? Learn Technical Method of Operation DetailsYou will find the technical details of the KageNoHitobito, its functions, and details about…
Malware Analysis Reports UNC1549 MINIBUS Backdoor Technical Analysis
Download the technical report on the UNC1549 MINIBUS backdoor: how it works, detections and IoCs for the suspected Iranian threat actor UNC1549.
Ransomware Trends Reports Ransomware Trends Report | Q4 2025
An intelligence-driven analysis of global ransomware activity in Q4 2025—covering sectors, regions, threat actors, and exploited vulnerabilities.
Malware Analysis Reports Xeno Rat Technical Analysis
Technical analysis of Xeno RAT — open-source RAT capabilities, persistence mechanisms, C2 communication protocol, and indicators of compromise for security
Malware Analysis Reports Phemedrone Stealer Technical Analysis
What You Will Find In This Report? Learn Technical Method of Operation DetailsThe technical details of the Phemedrone Stealer and its abilities, infection methods, and more.…
Malware Analysis Reports Cactus Ransomware Technical Analysis
What You Will Find In This Report? Learn Technical Method of Operation DetailsThe technical details of the Cactus Ransomware and its abilities, infection methods, and more.…
Ransomware Trends Reports Ransomware Trends Report | Q3 2024
Q3 2024 ransomware intelligence — active RaaS operations, new entrants, targeted regions, double extortion trends, and emerging tactics documented by
Malware Analysis Reports Sandworm’s New Arsenal: Kapeka Backdoor Technical Analysis
Kapeka backdoor explained: a C++ backdoor used in Eastern Europe since mid-2022 and linked by researchers to Sandworm. See what the report covers.
Malware Analysis Reports Gotham Stealer Technical Analysis
What You Will Find In This Report? Learn Technical Method of Operation DetailsThe technical details of the Gotham stealer and its abilities, infection methods, and more.…
All 8 pages
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.