HEXSENTINEL
محلل ثنائي وبرمجيات خبيثة
الملف المهني
هيكس سينتينل يقرأ الشيفرة الآلية كما لو كانت أدبًا. وبخلفية كمهندس عكسي في مختبر دفاعي، يُعد من أبرز محللي البرمجيات الخبيثة الصناعية والديدان المعقدة.
المهارات الأساسية
هندسة عكسية متقدمة؛ تحليل ثنائي منخفض المستوى؛ فك الإخفاء وفك التعبئة؛ تحليل سلوك برمجيات ICS/SCADA الخبيثة؛ تطوير توقيعات YARA معقدة
أبرز الإنجازات
فكك برمجية خبيثة لـ ICS خلال 16 ساعة، وتتبعها حتى سلسلة أدوات المهاجم.؛ اكتشف الخلل المنطقي وراء دودة سلاسل الإمداد التي أثرت في مستودعات NPM.
مقالات بقلم HEXSENTINEL
Nightspire Listing Puts Vietnam SuperPort Into the Extortion Spotlight
A new victim entry has surfaced, but the available information does not establish a verified breach, a technical path, or any downstream impact.
Nightspire Victim Tag Raises Alarm, But the Evidence Stays Thin
A new victim listing tied to WAGA Enterprises Architects LLC shows how extortion branding can spread faster than verified technical facts.
Nightspire Listing Raises Alarm, But Proof Still Stays Out of View
A public victim listing can trigger immediate concern, yet the available record names only PMG Project Management Group and does not verify a breach, theft, or operational disruption.
Umbra Listing Puts a Saudi Security Firm Under Extortion Spotlight
A new ransomware-victim claim naming Riyadh-based Raqib is public, but the technical record remains thin and the allegation is not independently verified.
Backup Tools Are Being Judged by Ransomware Reality, Not Feature Sheets
A 2026 roundup puts backup and recovery software under a harsher lens: immutability, tested recovery, and isolated restore options are now the key signals that matter for ransomware resilience.
Leak Entry Puts Chibitek MSP on the Extortion Board
A post attributed to N0n names Chibitek and lists client financial records, credentials, configuration secrets, and internal documents as allegedly exposed.
Panzer’s New Listing Turns a Niche Engineering Name into a Public Pressure Point
A published victim page is not proof of full compromise, but it can still create immediate reputational and operational stress for a specialized industrial firm.
AI Is Changing the Ransom Note Before It Changes the Breach
A new ransomware analysis points to a quieter shift: criminals may be using AI to sharpen extortion pressure, even when the technical intrusion itself remains unclear.
Victim Post, Unverified Damage: Four Hands LLC Lands in a Ransomware Claim
Umbra is tied to a new victim listing for Four Hands LLC, but the post does not independently prove breach, theft, or operational disruption.
Ransomware Operators Test AI Tooling as a Live Intrusion Channel
A reported Gentlemen affiliate used MCP during active intrusions, raising a narrow but important warning: trusted software interfaces can become part of criminal command traffic if they are exposed or poorly contained.
Qilin Publishes CORBY ROCK MILL as a New Victim Listing
A ransomware-extortion listing tied to CORBY ROCK MILL appears online, but the public record here does not confirm a breach, data theft, or encryption.
Stolen CI/CD Secrets Put a Ransomware Affiliate on Two Tracks
A reported affiliate linked to Gentlemen ransomware is said to have paired intrusion activity with a separate leak site, widening the pressure on victims while leaving key details unverified.
Netrunner Publishes a New Victim Listing, but the Incident Picture Remains Thin
A newly posted victim entry tied to Netrunner has surfaced, but the available record does not confirm intrusion details, data theft, or impact.
Redacted Ransomware Post Leaves More Questions Than Answers
A victim listing tied to Silentransomgroup appears with the company name withheld and a "FULL DATA TIMER" active, but the underlying incident details remain unverified.
A Fresh Eclipse Victim Listing Raises Alarm, but the Evidence Stops at the Label
Ransomware.live reports a new victim post tied to Eclipse for part02.simplexengg.in, but the public record does not confirm a breach, data theft, or operational impact.
Ransomware Hits a Medical Campus, and the Data Question Starts Immediately
UIC College of Medicine was affected by ransomware, and some information was stolen from its servers, raising the usual hard question: what was taken, and who can trust the recovery?
Victim Page for Windor.com Signals Pressure, But Not the Full Story
A newly published listing tied to Settra places windor.com in a ransomware context, while the available material leaves the core incident details unresolved.
MedusaLocker Listing Raises Questions, but the Verified Trail Is Narrow
A MedusaLocker post names Rueegseggerag and mentions one extracted email, while the wider breach picture remains unconfirmed.
ENKA Schools Lands in a Doommageddon Victim Listing
A ransomware-extortion entry names the school and carries an upcoming deadline, but the available facts do not confirm a breach or stolen data.
Aurora Posts New Victim Entry for Thomas Y. Pickett & Co., Inc.
A new Aurora victim entry names Thomas Y. Pickett & Co., Inc. and lists claimed materials ranging from backups and HR files to source code and financial records.