HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Architecture Firm Named in a New Ransomware Claim
A victim listing tied to Panzer has put Valode & Pistre in the ransomware frame, but the available facts stop short of proving compromise.
MSSP Threat Hunting Takes the Spotlight in a Ransomware Briefing
A ransomware-focused piece centers on how managed security providers can strengthen threat hunting, with analysis based on ANY.RUN research and findings.
Play Listing Pushes Another Company Name Into the Ransomware Spotlight
Advanced Imaging Solutions has appeared in a Play-linked victim listing, but the public record still does not confirm a breach, data theft, or any operational impact.
Play’s Latest Victim Tag Turns a Sparse Listing Into a Security Signal
A brief ransomware entry naming The Innovation Group is thin on detail, but it still shows how even a minimal disclosure can trigger operational caution and reputational pressure.
Orova’s latest victim listing names Gatetech Technology
A ransomware-extortion entry tied to Gatetech Technology underscores how a public claim can create uncertainty before any technical facts are verified.
Leak Page Puts BKH ICD in the Crosshairs, but the Damage Is Still Unverified
A victim listing tied to N0n names BKH ICD and flags it as “not paid” and “exposed,” yet the public record does not independently confirm a completed breach.
Extortion Marker Lands on a UK Marine Surveying Firm
A victim listing names BMT IQ, tags it as "NOT PAID" and "EXPOSED," and mentions business records, but the underlying intrusion and any file publication remain unverified here.
Leak Board Pressure Rises After a Logistics Name Lands in an Extortion Listing
A victim entry tied to EUSU Logistics points to a possible ransomware-linked disclosure, but the underlying intrusion and any data exposure remain unverified.
Extortion Listing Puts a Shipping Finance Trail Under the Spotlight
A victim page tied to Dong-A Tanker points to internal financial records, but the underlying intrusion and business impact remain unverified.
Leak-Site Listing Puts Dongkuk Steel Under Extortion Spotlight
A ransomware-style post names the South Korean steel maker and claims invoice and settlement records were exposed, but the underlying breach remains unverified.
Port Community IT Listing Draws Attention to Billing and EDI Data Risk
A victim entry tied to GNCNet / DGT Busan names billing records and operational EDI sample material, but the public record does not establish the full technical path or the true scope of any incident.
Port Community Data Names Surface in a Fresh Ransomware Victim Listing
A posted victim entry tied to GCS Kuwait points to port operations data and EDI archives, but the listing itself does not confirm the full incident path or technical scope.
Port Terminal Leak Claim Puts Logistics Records Under Extortion Pressure
A victim post tied to N0n names a Brazil-based terminal operator and alleges unpaid status, but the file exposure claim remains unverified.
Port Records Put Under Extortion Pressure in a Fresh Victim Listing
A new ransomware-style entry names a Germany-based port consulting firm and points to EDI archives and cargo records, but the underlying breach claim remains unverified.
Logistics Files Put Under Extortion Pressure in New N0n Listing
A ransomware listing attributed to N0n names Yusen Logistics Hong Kong and mentions commercial tariff documentation, but the underlying claim remains unverified.
Port Logistics Files Marked for Exposure in Fresh Extortion Claim
A victim-posting tied to N0n names ZPMC and lists operational EDI archives and cargo loading records, but the compromise itself is not independently confirmed.
Maritime Records Turned Into Leverage in a Claimed Extortion Post
A named shipping company has appeared in a ransomware-style leak claim that points to finance and vessel documents, but the technical facts remain unverified.
Ransom Note Hits a Cargo Node as Terminal Data Gets Pulled Into the Spotlight
A ransomware listing tied to Portonave points to exposed terminal databases and EDI archives, but the claim remains unverified and the technical path is still unclear.
Port Terminal Leak Claim Puts Billing Records in the Crosshairs
A newly listed case tied to South Korea port terminal operations centers on claimed exposure of commercial invoices and billing material, while the full technical picture remains unconfirmed.
Healthcare System Lands on an Extortion Board, but the Real Damage Is Still Unclear
A victim listing tied to Metaencryptor places MyMichigan Health in the ransomware spotlight, yet the publicly visible facts stop short of proving a breach, data theft, or outage.