HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
University Name Lands in a Ransomware Listing, but the Data Claim Still Needs Proof
A victim post tied to the Booba Project names the University of Illinois Chicago and alleges 344 GB of stolen data, yet the technical picture remains unverified.
Victim Listing Puts Medical Center in the Crosshairs, but the Data Claim Stays Unproven
A Booba project victim post naming Soni Medical Centre and a claimed 5.5 GB haul may intensify pressure, yet the underlying compromise remains unverified.
Booba Project Lists EdgeEndo USA, Claims 103 GB of Medical Device Data
A new victim entry tied to a ransomware and extortion label alleges a sizeable data theft, but the claim remains unverified.
Ransomware Listing Puts a Treatment Provider Under the Microscope, but Proof Is Thin
A victim post tied to Incransom names Rimrock Foundation, yet the available record does not confirm intrusion, data theft, or patient impact.
Warlock Ransomware Pressures Iberian Targets as Attribution Noise Lingers
Large organizations in Spain and Portugal are reported under ransomware pressure, while a separate Chinese-threat-actor label remains unverified and should be treated cautiously.
Akira’s New Leak Claim Turns Wesmar Into a Data-Pressure Target
A reported 66 GB dump, if accurate, would raise the stakes from simple extortion to a potentially sensitive data exposure case.
Deadlock Listing Pulls a High-Security Builder Into the Ransomware Spotlight
Far West Contractors has been named as a new victim, but the available record does not confirm the full intrusion path, data impact, or whether any downstream systems were affected.
Deadlock Listing Casts a Fresh Shadow Over a Financial Services Firm
Union FA has been named in a ransomware victim listing, but the available facts do not confirm a breach scope, data theft, or root cause.
Settra Brings mcpolymers.com Into the Spotlight, But Proof Still Matters More Than the Post
A new victim entry tied to mcpolymers.com has appeared under the Settra name, yet the available record does not confirm a breach, data theft, or real-world disruption.
Settra Posts Baltimore Freightliner as a New Victim
A ransomware listing has linked Baltimore Freightliner to Harbor Truck Sales and Service, Inc., but the visible entry does not confirm a breach, stolen data, or the full scope of any impact.
Warlock’s SharePoint Push Exposes a Thin Edge in Critical Infrastructure
Exploitation of a widely used collaboration platform can become a serious security problem even when the full breach picture is still unclear.
Warlock Ransomware Group Tied to SharePoint Flaws in Reported Campaigns Against Sensitive Sectors
Symantec-linked findings point to targeting of water, telecom, and government organizations, but the full scope of any compromise remains unconfirmed.
Victim Listing Puts Vermont Health Care on Alert, But the Breach Picture Is Still Unclear
A ransomware victim claim can signal extortion pressure, yet it does not by itself confirm stolen data, encryption, or the full scope of any intrusion.
Genesis Listing Puts a Healthcare Provider on the Ransomware Radar
A victim claim involving TLC Perinatal is unverified, but it is enough to raise concern around a healthcare organization without proving a breach.
Victim Listing Leans on Staff and Customer Records in LA PONDEROSA Claim
A ransomware/extortion post tied to Emperador names a Venezuelan poultry business and alleges archives with personnel and customer data, but those claims remain unverified.
Pear’s Latest Victim Tag Points to Software Answers, but the Damage Trail Is Still Thin
A public victim entry names Software Answers, yet the evidence available here does not confirm compromise, data theft, or operational impact.
Payment-Themed Phishing, Malicious ISO Files, and WinMerge in a Global Group Ransomware Run
The campaign shows how routine business formats and trusted utilities can be folded into an encryptor delivery chain without needing exotic tooling.
Leak-Site Claim Puts a Retail Domain in the Extortion Spotlight
A Settra-branded victim entry tied to dfiretailgroup.com raises pressure and privacy concerns, but the alleged data scope remains unverified.
Victim Listing Puts Belgian Aluminium Maker in the Crosshairs, but Proof Is Thin
Thegentlemen has named Corswarem Group as a victim, yet the available material does not confirm breach scope, data theft, or any technical root cause.
Thegentlemen Publishes Don Hierro as a New Victim, But the Impact Remains Unclear
A ransomware victim listing puts the Panama-based engineering firm on alert, yet the available material does not confirm a breach, stolen data, or the scope of any disruption.