HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Metallco Enters the Play-Branded Victim Stream, but the Damage Picture Is Still Blank
A ransomware-linked entry has surfaced with Norway attached, yet the available details stop at naming and do not confirm scope, theft, or technical root cause.
How a Domain Policy Turned Into an Extortion Lever
A reported PAYLOAD case shows how control over Active Directory policy can create business pressure even when no endpoint ransomware is deployed.
Akira’s Alleged Leak Claim Targets a New York Property Manager
A posted threat involving Prestige Management and a claimed 20GB dump is unverified, but the named data categories point to serious privacy and payment risk.
Police Department Named in an Extortion Post, But Proof Has Not Surfaced
A Doommageddon victim page lists the Charlottesville Police Department as "upcoming", yet the visible details stop short of confirming a breach, stolen data, or any operational disruption.
Storm Publishes Manroc Developments as a New Victim Listing
A ransomware and extortion label has placed the Ontario mining contractor in view, but the available information stops short of confirming intrusion details or impact.
Storm Lists The Money Store as a New Victim, but the Breach Picture Stays Unclear
A victim listing can be noisy, strategic, or real - but without verified compromise details, defenders should treat it as a warning signal, not a conclusion.
Inside the Domain: How PAYLOAD-Linked Operators Turned Admin Controls Into Disruption
A ransomware-related intrusion reportedly used compromised domain credentials, a FortiGate SSL VPN, and Group Policy to hit a Windows domain without leaving a classic encryptor behind.
Threeam Listing Puts Newman Tractor in the Extortion Spotlight
A public victim post names newmantractor.com, but there is no verified proof here of intrusion, data theft, or broader compromise.
Orova Victim Post Names Siddhi Green Excellence Pvt. Ltd.
A new victim entry on Ransomware.live identifies Siddhi Green Excellence Pvt. Ltd. and offers limited public detail beyond the claim itself.
A Fresh Victim Tag, but No Proof Yet: The Thin Line Between Listing and Incident
A newly published victim entry tied to Auditteam shows how quickly a ransomware claim can spread while the underlying technical facts remain unverified.
Named, Not Proven: A Ransomware Listing Pulls TEK SPB Into the Frame
A victim label tied to Auditteam places the St. Petersburg heat-engineering company in an extortion context, but the technical reality behind the claim remains unverified.
Qilin Victim Post Names KMLS, But the Breach Story Is Not Proven
A ransomware listing can signal pressure, but it does not by itself confirm intrusion, data theft, or operational harm.
Qilin Victim Listing Raises the Alarm, But Not the Proof
A new ShopDunk listing tied to Qilin signals pressure, while the real technical picture remains unconfirmed.
Ransomware Claim Targets a Notary Office and Its Paper Trail
A leak-style post tied to Emperador names an Italian notary office, but the real question is what, if anything, was actually taken.
Extortion Claim Puts a Federal-Linked Geomatics Firm in the Frame
Bravox is linked to a new victim post naming TOWILL, but the public record does not confirm data theft, encryption, or the full operational impact.
Nightspire’s New Victim Tag Turns a Quiet Listing Into a Loud Warning
A Great Bay Bio victim entry has appeared, but the available record does not confirm a breach, data loss, or the full scope of any incident.
Claimed Cloud Break-In Puts Fanatics Under Extortion Pressure
An unverified post tied to N0n names Fanatics and alleges destructive control over cloud-held records, but the core facts remain unconfirmed.
Cryptic victim listing puts Young Injury Law on Cry0’s radar
A new entry tied to Cry0 names Young Injury Law and carries only a “Coming soon...” marker, leaving the actual incident picture unconfirmed.
Clop Leak Site Defaced as ShinyHunters Intrusion Claims Circle a Tor Onion Service
An alleged intrusion against a ransomware-linked Tor onion service raises a narrow but important question: how much trust can criminal operators place in their own keys, branding, and site control?
Victim Listing Triggers New Questions Around a Brazilian Telecom-Linked Firm
A Panzer-linked victim post naming K3G Solutions Brazil is a reminder that ransomware claims can signal risk even when the technical path, impact, and scope remain unverified.