HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Akira’s Leak Claim Puts Knit Under Pressure, Not Yet Under Proof
A ransomware post says 175 GB of corporate data is coming soon, but the breach narrative remains unverified and the operational risk is the real signal.
Ransomware Claim Lands on Kidney Care Provider as Patient Data Risk Comes Into Focus
A new victim post tied to Interlock puts a healthcare provider in the spotlight, but the alleged data exposure remains unverified and the operational lesson is broader than one case.
Named in a Claim, Not Yet in Proof: Kellys Home Center Lands in the Pear Spotlight
A victim listing can move faster than verification, leaving defenders to separate reputational noise from a real security event.
Medusalocker Listing Raises the Stakes Around a Small Email Set
A posted victim entry naming ATCO Ltd and claiming 80 extracted emails shows how limited data disclosure can still create outsized security pressure.
PeopleSoft Exposure Draws Fresh Extortion Pressure as UNC6240 Reappears
A renewed campaign around Oracle PeopleSoft highlights how exposed enterprise applications can keep attracting extortion crews when vendor fixes are not fully applied.
Safepay Listing Casts a Shadow Over Bio-Strath Domain
A new victim label tied to bio-strath.com is enough to trigger scrutiny, but the public record does not yet confirm intrusion, encryption, or data theft.
Extortion Post Puts a Healthcare-Linked Domain in the Spotlight
Safepay has named fedelmundo.com.ph as a new victim, but the public record still does not confirm whether the claim reflects a verified intrusion, data theft, or disruption.
Cloud Extortion Claim Puts Tenant Trust Under Pressure
A ransomware listing naming Dediserve Ltd raises a familiar cloud risk: when a provider is targeted, the operational fallout can stretch well beyond a single badge or brand.
Panzer Lists Asesoría FAR as a New Victim Entry
A ransomware-extortion listing names the Barcelona firm, but the allegation remains unverified and should not be treated as proof of breach.
Victim Listing Triggers Pressure, Not Proof, in FTAPI Case
A new entry tied to Thegentlemen puts FTAPI Software in the extortion spotlight, but the available evidence stops at a public claim, not a verified technical finding.
Extortion Claim Puts Charles & Keith in the Spotlight, but Proof Is Thin
A ransomware-linked listing names the fashion brand as a victim, yet the available record does not confirm a breach, data theft, or the full scope of any incident.
Crystal Glass Enters the Extortion Circuit, but the Real Damage Is Still Unclear
A new victim listing tied to Thegentlemen puts a Leeds glass firm in the ransomware spotlight, yet the technical facts remain thin.
Extortion Note Lands on Brancoptica, and the Signal Matters More Than the Claim
A public victim listing linked to Thegentlemen puts Brancoptica in the ransomware frame, but the technical facts behind the claim remain unconfirmed.
Extortion Claim Puts a Small Software Firm in the Blast Radius
A ransomware-linked post has named Trifecta Software as a new victim, but the public record still does not confirm the breach path, data loss, or downstream impact.
Victim Post, Real Risk: Why a New Ransomware Listing Still Demands Verification
A victim listing tied to Thegentlemen and Grupo MARSAN has appeared, but the public record does not confirm breach depth, data theft, or operational impact.
Leak Post Puts a Recruitment Firm in the Crosshairs, but the Technical Story Remains Thin
A ransomware-extortion entry naming ANP Health is a reminder that businesses built on identity documents and hiring records can become attractive pressure points, even when the intrusion path is still unknown.
Victim Listing Puts STMicroelectronics in the Spotlight, but the Evidence Trail Is Thin
A fresh extortion-style victim post naming STMicroelectronics has surfaced, yet the available material stops short of proving breach, theft, or operational harm.
Storm Listing Raises the Stakes for an Aerospace Supplier, but the Breach Picture Is Still Fuzzy
A victim label can create immediate pressure, yet it does not by itself confirm encryption, theft, or the full scope of harm.
Fresh Victim Label Puts a Hawaii Clinic Under Ransomware Pressure
A victim listing tied to Wallstreet raises extortion concerns, but the available facts stop short of proving a breach, theft, or disruption.
Everest Lists Reliance Audit, but the Incident Picture Remains Unverified
A new victim post names Reliance Audit, yet the available record stops short of confirming breach scope, data loss, or technical root cause.