HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Extortion Claim Targets Shipping Records, Not Just Cargo
A new victim listing tied to a Japan-based ferry and RoRo operator shows how freight and payment files can become leverage before any breach is proven.
Maritime Finance Records Pulled Into a Leak-Site Pressure Play
A leak-site post alleges exposure of internal financial records from a South Korea ship management company, but the claimed impact remains unverified.
MoneyGram Lands in an Extortion Claim as Defenders Watch the Trust Layer
A ransomware listing tied to Thegentlemen puts a payments brand in the spotlight, but the available material stops short of proving a breach, data loss, or operational takeover.
A Public Victim Post Puts Confluent in the Extortion Spotlight
The only confirmed fact is narrow: Thegentlemen has publicly named Confluent, while the technical path, data scope, and real impact remain unverified.
Leak-Page Claims Put BigID in the Extortion Crosshairs
A ransomware-linked victim listing naming BigID is a reminder that a public claim can create immediate risk, even before any intrusion details are verified.
When Remote Access Becomes the Ransomware Doorway
A reported authentication-bypass flaw in Palo Alto Networks access products is being used as an entry path into internal networks, with ransomware operators among the named users of the weakness.
Extortion Post Names a Fresh Victim, but the Real Damage Remains Unproven
A new victim listing tied to N0n fits a familiar ransom pattern, yet the public record still stops short of proving what was taken or whether anything has been published.
Leak-Site Clock Ticks, But the Breach Remains Unproven
A new victim entry linked to N0n names a Michigan cannabis operator and sets a future publication time, yet the listing alone does not confirm a successful intrusion or data theft.
Clock-Ticking Ransomware Listing Puts a Florida Firm in the Spotlight
A newly posted victim entry attributed to N0n shows how an unverified listing can signal potential operational and reputational risk without proving a breach.
Rhysida’s Latest Leak Claim Puts Legal Finance Records in the Spotlight
A new extortion-style victim page names Reed & Giordano PA and lists sensitive files that could create fraud and privacy risk if the claims are accurate.
Leak-Site Victim Labels Can Move Faster Than Proof
Qilin has been tied to a new victim listing naming Friendship Christian School, but the public record here does not confirm a breach, data theft, or operational impact.
Extortion Listing Puts a Florida Design Firm Under a Public Countdown
A victim page linked to N0n names an architecture and design company in Florida and attaches a future exposure time, but the alleged data leak remains unverified.
Dragonforce’s Latest Claim Puts TQC S.A. in the Spotlight
A ransomware listing allegedly posted by Dragonforce claims a 750 GB data release, but the incident details remain unverified and the operational impact is not yet established.
Healthcare Leak Claim Lands in Winnipeg, but the Evidence Still Stops at the Post
A newly published victim entry tied to Incransom and hsc.mb.ca raises a sensitive question for healthcare defenders: what is confirmed, what is claimed, and what remains unproven.
Qilin Listing Puts Glenhardie Country Club Into the Ransomware Spotlight
A victim entry tied to Qilin names Glenhardie Country Club, but the available record does not confirm a breach, data theft, or the real scope of any incident.
Extortion Listing Names Anaergia, But the Incident Picture Is Still Unproven
A new victim post tied to Cry0 puts the Canadian firm in the ransomware spotlight, yet the available record stops short of confirming breach, theft, or operational impact.
Bravox Lists Dudley Land Company as a New Victim, but the Breach Picture Is Unclear
A ransomware-extortion victim listing can signal pressure, not proof: the public record names Dudley Land Company, but it does not confirm theft, disruption, or root cause.
Termite’s Latest Victim Claim Puts a Dental Cloud in the Crosshairs
A victim listing tied to iDentalSoft raises operational and data-risk questions, but the available facts do not confirm a breach, theft, or encryption.
Deadline Posted Beside a Fresh Ransomware Listing for Ladrillera Mecanizada
Arcusmedia is tied to a new victim entry, but the underlying technical cause and any downstream impact remain unconfirmed.
BYOD Post Puts T-Mobile Name in an Extortion Spotlight
A public threat post names T-Mobile, but the claimed data exposure and any underlying intrusion remain unverified.