Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Malware Analysis Reports Echida Stealer Technical Analysis
What You Will Find In This Report? Learn Technical Method of Operation DetailsThe technical details of the Echida Stealer Malware. The report will show many points…
Malware Analysis Reports Godfather Android Banking Trojan Technical Analysis
Godfather is an Android banking trojan that abuses accessibility services. See what the Brandefense technical report covers, from IoCs to mitigation.
Malware Analysis Reports Technical Analysis of Stop/Djvu Ransomware
What this report covers Stop/Djvu is a family of Windows ransomware that encrypts files, marks them with changing extensions and leaves a ransom note called _readme.txt…
Malware Analysis Reports Poseidon Malware Technical Analysis The APT 36 Campaign
Poseidon malware technical analysis of the APT36 campaign. The report covers infection methods, abilities, detections and indicators of compromise
Malware Analysis Reports Technical Analysis of Stealc Malware
Technical analysis of the Stealc stealer: how it infects systems, what it steals, detections, IoCs and mitigation tactics for security teams.
Ransomware Trends Reports Ransomware Trends Report | Q4 2023
Q4 2023 ransomware year-end analysis — threat actor activity, RaaS evolution, most targeted industries, and dark web intelligence sourced from Brandefense
Malware Analysis Reports In-depth Analysis of AvosLocker Ransomware
Technical analysis of AvosLocker ransomware — safe mode exploitation, encryption routine, network propagation, RaaS structure, and incident response guidance
Malware Analysis Reports Pandora Ransomware Technical Analysis Report
Technical analysis of Pandora ransomware — encryption routines, initial access techniques, lateral movement, ransom negotiation behavior, and detection rules
Malware Analysis Reports LockBit 3.0 Technical Analysis Report
What this report covers LockBit 3.0, also called LockBit Black, follows LockBit 2.0 as a ransomware-as-a-service variant. This report explains what changed: a Zcash payment option…
All 8 pages
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.