Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Country Reports Indonesia Cybersecurity Threat Landscape and Strategic Insights: Mid-Year 2024
Brandefense mid-year 2024 study of threats to Indonesian government, defense, finance, energy, telecom and aviation: dark web, ransomware, hacktivism.
Malware Analysis Reports Technical Analysis of Cylance Ransomware
Technical breakdown of Cylance ransomware — encryption behavior, targeted file types, ransom note characteristics, indicators of compromise, and YARA-based
Ransomware Trends Reports Ransomware Trends Report | Q2 2024
Q2 2024 ransomware activity — prominent threat actors, sector targeting trends, leak site intelligence, and defensive recommendations from Brandefense CTI and
Malware Analysis Reports Invicta Stealer Technical Analysis
Technical analysis of Invicta Stealer — credential harvesting methods, targeted applications, obfuscation techniques, C2 communication, and IOCs for SOC
Malware Analysis Reports APT34’s New Backdoor SideTwist Variant Technical Analysis
What You Will Find In This Report? APT34 (OilRig) is one of the most persistent state-sponsored threat groups targeting critical industries worldwide. In this exclusive Brandefense…
Malware Analysis Reports Private Loader as a RisePro Stealer Dropper Technical Analysis
What this report covers PrivateLoader is a malware dropper sold through a Pay-Per-Install service. In that model a malware operator supplies a payload, the number of…
Malware Analysis Reports Technical Analysis of Mystic Stealer
Technical analysis of Mystic Stealer — MaaS delivery model, credential and crypto theft capabilities, anti-analysis mechanisms, C2 protocol, and detection IOCs
Malware Analysis Reports Technical Analysis of Snatch Ransomware
Technical analysis of Snatch ransomware — safe mode reboot exploitation, pre-encryption data exfiltration, RaaS mechanics, and detection indicators for
Ransomware Trends Reports Ransomware Trends Report | Q1 2024
Q1 2024 ransomware intelligence — active threat groups, new strains, victim industry breakdown, and dark web monitoring insights from Brandefense threat
All 8 pages
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.