This repository contains technical short articles written by cybersecurity persons at CGI. It aims at sharing with the general public some findings on ongoing malware campaigns.
Topics :
- Malware Analysis
- Digital Forensics
- Incident Response
- Breaking Things
- Dangerous Hacks
- Threat Intelligence
- Threat Research
- Alert Handling
- SOC operations
Visit https://www.cgi.com/en/cybersecurity to know more about CGI cybersecurity services.
- 2025-08-01-ivanti-sslvpn : APT malware reverse engineering and Incident Response on an Ivanti SSLVPN appliance
- 2026-01-07-headcrab : HeadCrab malware discovery and extraction from Linux hosts
We're cyber hackers, not international lawyers.
Readers should view and use information of this page at their own risk.
CGI and authors are not liable for any damage or troubles arising out of, or in connection with, the use of this blog.
The information contained in the blog is for general information purposes only, not to provide specific advice or warranties.
Under no condition should anything written or shared in this GitHub repository considered a formal statement from CGI. Consider every content shared here provided with NO WARRANTY.
THE REPOSITORY CONTENT IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE REPOSITORY CONTENT OR THE USE OR OTHER DEALINGS IN THE REPOSITORY CONTENT.