Wei Gao

Malware Reverse Engineer

Wei Gao is a malware reverse engineer works for IBM X-force IRIS.

Threat Intelligence August 4, 2021

ITG18: Operational security errors continue to plague sizable Iranian threat group

5 min read - This blog supplements a Black Hat USA 2021 talk given August 2021. IBM Security X-Force threat intelligence researchers continue to track the infrastructure and activity of a suspected Iranian threat group ITG18. This group’s tactics, techniques and procedures(TTPs) overlap with…

Incident Response September 17, 2020

A New Botnet Attack Just Mozied Into Town

11 min read - A relatively new player in the threat arena, the Mozi botnet, has spiked among Internet of things (IoT) devices, IBM X-Force has discovered. This malware has been active since late 2019 and has code overlap with Mirai and its variants.…

Advanced Threats May 14, 2020

X-Force IRIS Overcomes Broken Decryption Mechanism in Jest Ransomware

10 min read - IBM X-Force Incident Response and Intelligence Services (IRIS) recently helped a company fend off a ransomware attack by building a custom decryptor for a strain of ransomware known as "Jest."

Advanced Threats March 18, 2020

EnigmaSpark: Politically Themed Cyber Activity Highlights Regional Opposition to Middle East Peace Plan

9 min read - In recent analysis of malicious activity likely targeting entities based in the Middle East, IBM X-Force IRIS discovered a backdoor malware strain we named "EnigmaSpark."

Failed to load data

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.

Subscribe today

Analysis and insights from hundreds of the brightest minds in the cybersecurity industry to help you prove compliance, grow business and stop threats.

Cybersecurity News By Topic By Industry Exclusive Series X-Force Podcast Events Contact About Us

Security Intelligence

{{title}}

{{title}}

{{title}}

{{title}}

Topics

Wei Gao

ITG18: Operational security errors continue to plague sizable Iranian threat group

A New Botnet Attack Just Mozied Into Town

X-Force IRIS Overcomes Broken Decryption Mechanism in Jest Ransomware

EnigmaSpark: Politically Themed Cyber Activity Highlights Regional Opposition to Middle East Peace Plan

{{{title}}}

Topic updates