HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Leakboard Noise Is Not Proof, But It Can Still Shake a City
Qilin was linked to a published victim listing naming Heber City, Utah, but the available material does not independently confirm a ransomware attack, data theft, or operational impact.
Qilin Listing Puts SLTN Inter Access Under a Cloud of Unverified Extortion Claims
A new victim entry is a warning signal, but it does not by itself confirm a breach, data theft, or ransomware impact.
Ransomware Listing Puts a Clinic on the Board, but Proof Remains Unclear
A victim entry tied to Krybit names a Canadian eye care provider, yet the available material does not independently confirm an attack, data theft, or patient impact.
Krybit Victim Listing Puts Grupo Euro on the Radar, But Not Yet on the Hook
A public victim entry can signal extortion pressure, yet it does not by itself confirm a breach, data theft, or operational damage.
Victim Page, No Proof: Krybit Listing Triggers Fresh Doubt Around MODON
A named ransomware victim listing can be a warning sign, but it does not by itself prove a breach, data theft, or operational compromise.
Named, Not Yet Proven: A Ransomware Claim Lands on Penco Products
A victim listing tied to Thegentlemen has placed Penco Products in the ransomware spotlight, but the available record does not independently confirm an intrusion, data theft, or operational disruption.
Ransomware Listing Puts Red Oak Technologies in the Spotlight
A victim label tied to Thegentlemen has surfaced, but the available evidence does not independently confirm a ransomware incident, data theft, or verified compromise.
Victim Label Alone Is Not Proof, but It Still Puts a School District on Alert
Weld Re-8 School District has been named in a ransomware victim listing tied to Thegentlemen, yet the intrusion path, data impact, and operational fallout remain unconfirmed.
One Victim Label, No Verified Breach: The Payoutsking Listing for Merical LLC
A new ransomware-victim post has surfaced, but the available record does not independently confirm an attack, data theft, or any impact on Merical LLC.
Victim List, Not Verdict: A Retail Name Appears in a Fresh Ransomware Claim
Majinahanashi has reportedly listed Asia Market Ltd, but the material provided does not independently confirm a breach, encryption event, or data theft.
One Victim Label, Zero Proof: Ransomware Feed Adds a Swiss Steel Firm
A ransomware listing reportedly names SA BAUFER V.F, but the available material does not independently confirm a breach, data theft, or operational disruption.
Unverified Victim Listing Puts a Manufacturing Name in the Ransomware Spotlight
A public victim listing can raise concern, but it does not by itself confirm a breach, encryption, or data theft.
Alleged N0n Leak Puts Asisken Medical Claims Records Under a Dark Cloud
A ransomware listing linked to Asisken Asistencia Médica S.A. alleges exposure of identity, billing, and claims data, but the claim is not independently confirmed.
Victim Listing Points to Claimed Document Exposure at a Portuguese Engineering Firm
A N0n-linked posting names GPIC Projectos Con Instalacoes Lda, but the alleged file exposure, scope, and impact remain unconfirmed.
Ransomware Listing Puts Texcar in the Crosshairs, but the Exposure Remains Unproven
A new victim page names Texcar Inc. and claims sensitive records were exposed, yet the available material does not confirm a breach, theft, or the authenticity of the data.
Deadlock Listing Raises Questions, But Not Proof, for a Regional Home Builder
Trinity Custom Homes was published as a new victim, yet the available material does not independently confirm a ransomware incident, data theft, or operational impact.
One Victim Page, Many Unanswered Questions: Qilin Namecheck Triggers Caution
A ransomware victim listing linked Qilin to Commonwealth Community Bank, but the available material does not independently confirm a breach, data theft, or any downstream impact.
Pear Listing Puts Fresh Farms Under Extortion Spotlight, Without Proof of a Breach
Fresh Farms has appeared in a Pear victim listing, but the available record does not independently confirm a ransomware incident, data theft, or operational impact.
Masked Victim Listing Appears With a Future Deadline
A Doommageddon entry is marked as “upcoming” with a dated deadline, but the record does not independently confirm a ransomware incident, data theft, or any downstream impact.
Trevi Technology Appears in a Ransomware Listing, but the Evidence Stops There
Orova is tied to a new victim label for Trevi Technology, yet the available material does not independently confirm a breach, data theft, or operational disruption.