Reports. In-Depth Research.
Quarterly ransomware trend reports, malware technical analyses and country reports from the Brandefense research team.
Malware Analysis Reports Zebrocy Malware Technical Analysis Report
Analysis of Zebrocy malware attributed to APT28 — multi-language variants, initial access techniques, data collection behavior, and geopolitical targeting
Ransomware Trends Reports Ransomware Trends Report | Q3 2023
Q3 2023 ransomware intelligence — emerging threat groups, double extortion trends, geographic targeting patterns, and actionable IOCs for enterprise security
Malware Analysis Reports SandWorm APT Group Cyber Intelligence Report
Intelligence report on the Sandworm APT group — threat actor profile, historical campaigns, toolset analysis, geopolitical targeting patterns, and defensive
Malware Analysis Reports Insurance Sector Targeted Malware Analysis
Report on insurance sector malware: technical details, detections and IoCs from the analysis of a sample aimed at employees of insurers in Turkey.
Ransomware Trends Reports Ransomware Trends Report | Q2 2023
Q2 2023 ransomware analysis — new ransomware families, targeted sectors, affiliate program activity, and threat intelligence from dark web leak sites monitored
Malware Analysis Reports DarkSide Ransomware Technical Analysis Open Report
Technical analysis of DarkSide ransomware: how the RaaS group operates, its double extortion model, how it infects systems, plus detections and IoCs.
Malware Analysis Reports HermeticWiper Malware Technical Analysis Open Report
Analysis of HermeticWiper destructive malware — wiper functionality, MBR corruption technique, deployment method chain, and forensic indicators from
Malware Analysis Reports PetitPotam Vulnerability Analysis Open Report
Learn what the PetitPotam vulnerability is, how the NTLM relay attack works, how CVE-2021-36942 is rated and how to mitigate it on AD CS systems.
Ransomware Trends Reports Ransomware Trends Report | Q1 2023
Q1 2023 ransomware intelligence — active threat groups, victim industries, attack trends, and key indicators from Brandefense's dark web monitoring and
All 8 pages
Our Research, By Email.
Questions About Reports.
Last updated June 9, 2026-
Three kinds: the quarterly Ransomware Trends Report, malware analysis reports on single malware families, and country reports on the threats facing one market.
-
Every quarter. The newest edition on this page is Q3 2026, published in October 2026.
-
The Ransomware Trends Reports and the country reports ask for a short form before the PDF opens. The malware analysis reports are not behind a form.
-
Each one is a technical analysis of one malware family or ransomware strain, for example the Fog Ransomware, Strela Stealer and Grandoreiro Trojan analyses.
-
Use the email box in the Our Research, By Email section on this page and tick the consent box.
-
CISA runs the StopRansomware program and the FBI IC3 publishes annual reports. Both are linked here.
-
The page lists 64 reports in three groups. There are 43 malware analysis reports, 15 ransomware trends reports and 6 country reports. You can filter by group.
-
It analyzes 2,898 confirmed ransomware incidents across 109 active threat groups. It covers top operators, sector and country targeting, and MITRE ATT&CK. It was published in October 2026.
-
The Q2 2026 report analyzes 2,509 confirmed incidents across 91 active groups. The Q3 2026 report analyzes 2,898 incidents across 109 groups. Both reports are listed on the Reports page.
-
Yes. The report is called Ransomware in U.S. Healthcare: Threat Landscape, Impact, and Mitigation Strategies. It is listed on the Reports page.
Research Is General. Your Exposure Is Not.
A demo of the platform, run on your own domain.