HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Clop-Linked Victim Listing Raises Noise Before Proof
A new entry naming KVHELI-WORDPRESS.COM shows how extortion publicity can create pressure long before any technical picture is clear.
Clop Listing Raises Alarm, But the Evidence Stops at the Label
A ransomware-extortion entry can signal pressure on a target, yet the listing alone does not confirm breach scope, stolen data, or the full technical path.
Clop Lists BRILLONCONSUMER.COM as a New Victim, but Proof Remains Thin
A fresh victim listing can signal extortion activity, yet it does not by itself establish a breach, data theft, or confirmed operational impact.
Akira Leak Claim Puts a Casino and Hospitality Operator on Alert
A named victim post and a promised 367 GB dump create pressure, but the underlying breach picture still needs verification.
Leak Claim Puts a Law Firm’s Files in the Extortion Crosshairs
Incransom has listed a West Virginia law practice as a victim, but the file dump, scale, and data categories remain unverified.
Public Victim Listing Puts Merrimack County in the Extortion Spotlight
A new victim entry tied to Merrimack County and a claimed 3 GB data haul shows how ransomware crews use publication itself as pressure, even when the underlying breach details remain unverified.
Victim Listing, Not Verdict: Booba Claim Ties COSEF to 200 GB Data Figure
A posted victim entry names COSEF and attaches a 200 GB data claim, but the incident details remain unverified and the exact impact is still unclear.
Qilin’s Latest Victim Post Leaves More Questions Than Answers
A public claim has named Inkript as a new victim, but the available record does not confirm a breach, data theft, or any wider impact.
Medusalocker Listing Puts a Small Email Claim in a Bigger Spotlight
A victim entry naming Abv and abv.bg includes a claim of 583 extracted emails, but the technical root cause and real-world scope remain unverified.
Redacted Victim Post Puts the Focus on Pressure, Not Proof
A new victim entry linked to Silentransomgroup shows how extortion posts can create urgency even when the public record is still thin.
PAYLOAD Turns Windows Trust Into the Attack Path
A ransomware case linked to Active Directory shows how attackers may abuse administration layers to affect an entire domain without dropping obvious malware on endpoints.
Qilin’s Latest Victim Label Raises a Familiar Ransomware Trap
A newly posted name can signal extortion pressure, but the material here does not verify a breach, damage, or data loss.
Play’s New Victim Entry Puts Hurley in the Crosshairs
A reported victim listing tied to Play and labeled Hurley adds pressure, but the underlying incident details remain unverified and narrow.
Metallco Enters the Play-Branded Victim Stream, but the Damage Picture Is Still Blank
A ransomware-linked entry has surfaced with Norway attached, yet the available details stop at naming and do not confirm scope, theft, or technical root cause.
How a Domain Policy Turned Into an Extortion Lever
A reported PAYLOAD case shows how control over Active Directory policy can create business pressure even when no endpoint ransomware is deployed.
Akira’s Alleged Leak Claim Targets a New York Property Manager
A posted threat involving Prestige Management and a claimed 20GB dump is unverified, but the named data categories point to serious privacy and payment risk.
Police Department Named in an Extortion Post, But Proof Has Not Surfaced
A Doommageddon victim page lists the Charlottesville Police Department as "upcoming", yet the visible details stop short of confirming a breach, stolen data, or any operational disruption.
Storm Publishes Manroc Developments as a New Victim Listing
A ransomware and extortion label has placed the Ontario mining contractor in view, but the available information stops short of confirming intrusion details or impact.
Storm Lists The Money Store as a New Victim, but the Breach Picture Stays Unclear
A victim listing can be noisy, strategic, or real - but without verified compromise details, defenders should treat it as a warning signal, not a conclusion.
Inside the Domain: How PAYLOAD-Linked Operators Turned Admin Controls Into Disruption
A ransomware-related intrusion reportedly used compromised domain credentials, a FortiGate SSL VPN, and Group Policy to hit a Windows domain without leaving a classic encryptor behind.