HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
N0n Flags Company #1 in a New Victim Entry
The listing is brief, the technical detail is thin, and the claim of an early settlement remains unverified beyond the posted label.
Deadline-Driven Extortion Marks a New N0n Victim Listing
A fresh ransomware-style listing tied to Canadian financial services shows how a public countdown can become part of the pressure campaign, even before any technical facts are confirmed.
Victim Tag Appears, But the Real Damage Question Is Still Open
Lamashtu has been linked to a newly published victim entry for Grupo Industrial Tauro, yet the available record stops short of confirming a breach narrative.
Qilin-Branded Victim Post Puts Mutsumi Group Into the Extortion Spotlight
A posted claim naming Mutsumi Group has surfaced, but the public record still ends at the announcement and does not verify a breach.
Qilin’s Latest Victim Post Turns a Name Into a Pressure Point
A newly published victim entry links Qilin to Cotesma, but the verified record remains narrow and does not confirm breach scope, data theft, or downstream impact.
Qilin's Latest Victim Tag Highlights the Limits of Early Evidence
Emser has been listed as a new victim in a Qilin-linked post, but that designation alone does not confirm a breach, data theft, or the scope of any impact.
Booba Project’s Health-System Leak Claim Raises the Alarm, Not the Proof
A ransomware-leak post names MorseLife Health System, Inc. and claims 344 GB of stolen data, but the access path and real impact remain unverified.
Krybit Lists daralteb.com as a New Victim, but the Breach Picture Is Still Thin
A ransomware victim post has placed a healthcare-related domain in the extortion spotlight, yet the public evidence does not confirm data theft, encryption, or full compromise.
One Redacted Victim Entry, Many Open Questions in a Ransomware Post
A new Payoutsking-labeled victim entry for M****C is visible, but the post alone does not prove breach scope, data theft, or any operational impact.
One Name on a Victim List Is Not Proof, but It Still Changes the Risk Picture
A ransomware-and-extortion item names Precon Marine Inc. as a new victim, while the public record still leaves the intrusion path, scope, and impact unresolved.
SharePoint Weaknesses Put Ransomware Operators on a Quiet Path In
Warlock is reportedly using Microsoft SharePoint vulnerabilities to blunt defenses first, then push ransomware into organizations across Spanish- and Portuguese-speaking regions.
Rhysida Listing Raises the Stakes for a Lebanese Textile Firm
A new ransomware-style victim page tied to Skaff Group points to a data mix that can be especially damaging when identity records, payroll material, and banking documents sit together.
Stadium Blueprints, Payroll Records, and Dispute Files Put a Megaproject in the Crosshairs
A claimed ransomware intrusion tied to a World Cup stadium project shows how contractors can become pressure points when commercial, personal, and design data sit in the same environment.
School Named in Extortion Listing as Ransomware Pressure Builds Around a Thin Evidence Trail
Westrop Primary & Nursery School appears in a ransomware-and-extortion listing tied to Thegentlemen, but the published material stops short of proving a breach or data theft.
Fresh Victim Tagging Puts Industrial Supplier in Ransomware Spotlight
A listing tied to Thegentlemen names WOOSHIN SAFETY SYSTEMS CO LTD, but the public record is still too thin to confirm any technical intrusion or downstream harm.
Storm’s Name on a Factory Target Creates Noise Before Proof
A victim listing tied to Allied Machine & Engineering may signal an extortion claim, but the available details do not confirm intrusion, theft, or scope.
Extortion Post Turns Aware Into a New Pressure Target
A victim listing tied to Thegentlemen claims 400 GB of data, but the allegation remains unverified and should be treated as an extortion signal, not proof of breach.
COAL Leak Claim Puts a Spanish Professional Body in the Spotlight
A new alleged victim page tied to Akira names the Official College of Architects of León and claims a sizable data set, but the exposure remains unverified.
Nightspire Listing Puts Pharma Research Data in the Crosshairs Again
A new victim entry tied to Forma Therapeutics Holdings, Inc. underscores how ransomware operators can weaponize sensitive research records even when the full incident picture is still unclear.
Warlock’s SharePoint Trail Raises the Stakes for Critical Services
A ransomware name tied to critical infrastructure incidents now sits alongside reported Microsoft SharePoint exploitation, but the full intrusion chain and impact remain unconfirmed.