HEXSENTINEL
Binary & Malware Analyst
Professional Profile
HexSentinel reads machine code as if it were literature. With a background as a reverse engineer in a defense lab, he is among the top analysts of industrial malware and complex worms.
Key Skills
Advanced reverse engineering; Low-level binary analysis; Deobfuscation and unpacking; ICS/SCADA malware behavior analysis; Complex YARA signature development
Major Achievements
Disassembled an ICS malware in 16 hours, tracing it back to the attacker's toolchain.; Discovered the logical bug behind a supply-chain worm affecting NPM repositories.
Articles by HEXSENTINEL
Braincipher’s Latest Claim Turns One Domain Into a Public Pressure Point
A new victim listing tied to trailerbridge.com is a reminder that ransomware pages can signal risk without proving the full technical story.
Braincipher Tag on a New Victim Entry Pushes Defenders Into Verification Mode
A victim-style listing tied to latitudesubro.com has appeared, but the public record does not confirm a breach, data theft, or the full scope of any incident.
A Coded Victim Label Leaves the Ransomware Story Half in Shadow
A new entry tied to Auditteam uses an anonymized identifier, but the visible details stop short of proving who was targeted or what happened.
Extortion Post, Thin Evidence: M3rx and the Noonsugar.com Listing
A new victim page linked to M3rx names Noon Sugar Mills Limited, but the entry does not specify stolen data, leaving the breach picture unconfirmed.
Leak Site Flags an IT Vendor, but the Evidence of Theft Is Still Thin
A fresh victim listing tied to M3rx places somasolucoes.com in the extortion spotlight, yet the visible record does not show stolen files or a confirmed breach path.
Leak Deadline Puts a Medical Domain Under Extortion Pressure
A Chaos-linked listing names carolinaasthma.com and claims 290 GB of material could be released within 24 hours, but the alleged disclosure remains unverified.
Keio Group Ransomware Outage Puts Shared Business Systems Under Pressure
Keio Corporation confirmed a ransomware attack on servers within its group, and the resulting outage disrupted certain business systems at affiliated companies.
Akira’s Leak Claim Puts Knit Under Pressure, Not Yet Under Proof
A ransomware post says 175 GB of corporate data is coming soon, but the breach narrative remains unverified and the operational risk is the real signal.
Ransomware Claim Lands on Kidney Care Provider as Patient Data Risk Comes Into Focus
A new victim post tied to Interlock puts a healthcare provider in the spotlight, but the alleged data exposure remains unverified and the operational lesson is broader than one case.
Named in a Claim, Not Yet in Proof: Kellys Home Center Lands in the Pear Spotlight
A victim listing can move faster than verification, leaving defenders to separate reputational noise from a real security event.
Medusalocker Listing Raises the Stakes Around a Small Email Set
A posted victim entry naming ATCO Ltd and claiming 80 extracted emails shows how limited data disclosure can still create outsized security pressure.
PeopleSoft Exposure Draws Fresh Extortion Pressure as UNC6240 Reappears
A renewed campaign around Oracle PeopleSoft highlights how exposed enterprise applications can keep attracting extortion crews when vendor fixes are not fully applied.
Safepay Listing Casts a Shadow Over Bio-Strath Domain
A new victim label tied to bio-strath.com is enough to trigger scrutiny, but the public record does not yet confirm intrusion, encryption, or data theft.
Extortion Post Puts a Healthcare-Linked Domain in the Spotlight
Safepay has named fedelmundo.com.ph as a new victim, but the public record still does not confirm whether the claim reflects a verified intrusion, data theft, or disruption.
Cloud Extortion Claim Puts Tenant Trust Under Pressure
A ransomware listing naming Dediserve Ltd raises a familiar cloud risk: when a provider is targeted, the operational fallout can stretch well beyond a single badge or brand.
Panzer Lists Asesoría FAR as a New Victim Entry
A ransomware-extortion listing names the Barcelona firm, but the allegation remains unverified and should not be treated as proof of breach.
Victim Listing Triggers Pressure, Not Proof, in FTAPI Case
A new entry tied to Thegentlemen puts FTAPI Software in the extortion spotlight, but the available evidence stops at a public claim, not a verified technical finding.
Extortion Claim Puts Charles & Keith in the Spotlight, but Proof Is Thin
A ransomware-linked listing names the fashion brand as a victim, yet the available record does not confirm a breach, data theft, or the full scope of any incident.
Crystal Glass Enters the Extortion Circuit, but the Real Damage Is Still Unclear
A new victim listing tied to Thegentlemen puts a Leeds glass firm in the ransomware spotlight, yet the technical facts remain thin.
Extortion Note Lands on Brancoptica, and the Signal Matters More Than the Claim
A public victim listing linked to Thegentlemen puts Brancoptica in the ransomware frame, but the technical facts behind the claim remain unconfirmed.