HEXSENTINEL
Binary & Malware Analyst
Professional Profile
HexSentinel reads machine code as if it were literature. With a background as a reverse engineer in a defense lab, he is among the top analysts of industrial malware and complex worms.
Key Skills
Advanced reverse engineering; Low-level binary analysis; Deobfuscation and unpacking; ICS/SCADA malware behavior analysis; Complex YARA signature development
Major Achievements
Disassembled an ICS malware in 16 hours, tracing it back to the attacker's toolchain.; Discovered the logical bug behind a supply-chain worm affecting NPM repositories.
Articles by HEXSENTINEL
Victim Listing Triggers New Questions Around a Brazilian Telecom-Linked Firm
A Panzer-linked victim post naming K3G Solutions Brazil is a reminder that ransomware claims can signal risk even when the technical path, impact, and scope remain unverified.
Pharma Extortion Claim Targets Network Blueprints, Not Just Files
A claimed ransomware post tied to AstraZeneca Türkiye centers on configuration data, connection records, and an alleged blackout threat that remains unverified.
Extortion Claim Puts a Private Credit Firm’s Internal Systems in the Crosshairs
A ransomware-style post tied to Argentem Creek Partners alleges network evidence, system mapping, and document-flow exposure, but the technical scope remains unverified.
Securotrop Listing Puts Prefix Corp Under a Cloud, But the Facts Stay Thin
A published victim entry names Prefix Corp, marks it AWAITING, and includes 1135 GB, yet the available record does not confirm breach details or data theft.
Anonymous Victim Tag Appears in Auditteam Leak Post, but the Trail Ends There
A new ransomware-extortion listing tied to Auditteam appears to use a coded victim label, yet it reveals no breach details, no scope, and no confirmed impact.
Rhysida Leak Claim Puts Pharma Records, IDs, and Financial Files in One Blast Radius
A new victim post names MPA Pharma and alleges a large trove of files, but the real risk lies in the mix of regulated, personal, and operational records.
Victim Listing Pulls a High-Trust Disposal Firm Into the Ransomware Frame
A post tied to Spirals names ANYTHINGIT, but the verified record stops at the listing and the real concern is what a trust-heavy ITAD role means if compromise is later confirmed.
Extortion Claim Puts Contractor Trust Chains Under the Spotlight
A claimed Endzone victim notice tied to AT&T underscores how third-party access, remote desktops, and SaaS permissions can become the real battleground in ransomware cases.
Claimed Data Dump Turns a Government SaaS Platform Into an Extortion Flashpoint
A ransomware-linked post points at Accela and alleges a large data theft, raising the stakes for public-sector systems that concentrate citizen and worker records in one place.
Storm Victim Listing Puts a Wealth Manager in the Spotlight, Without Proving a Breach
Johnson Investment Counsel has surfaced in a Storm-linked victim post, but the listing alone does not confirm intrusion, data theft, or operational disruption.
Panzer Lists Stim as a New Victim on Ransomware.live
A fresh victim listing has appeared, but the public record does not yet confirm compromise, data theft, or operational impact.
Panzer’s New Listing Puts Inovapy in the Extortion Frame
A fresh victim entry tied to Inovapy adds a public extortion claim, but the supplied record does not confirm breach details, data theft, or attacker responsibility.
Extortion Signal Appears Over a German Care Provider, While the Technical Picture Stays Thin
A victim page linked to Diakoniewerk Apolda gGmbH has surfaced, but the available record does not confirm theft, encryption, or any broader operational impact.
Victim Names on a Ransomware Board Can Move Markets of Fear Before Facts
A new listing tied to Braincipher and xpera.ca shows how extortion branding can create urgency before any compromise is independently confirmed.
Settra Posts a New Victim Notice for budgetms.com
A ransomware-extortion listing tied to budgetms.com is a reminder that a public claim can create immediate pressure even when the technical facts remain unconfirmed.
Victim Listing Appears Before Proof: Settra Post Pulls fchhotels.com Into View
A ransomware-extortion listing names fchhotels.com and references First Call Hospitality, but the public record does not verify breach scope, stolen data, or fault.
Metaencryptor’s Victim Listing Puts a Medical Diagnostics Name Under Pressure
A newly published claim names Beckman Coulter, but the available record does not confirm a breach, data theft, or operational disruption.
Extortion Claim Around Revolut Puts Proof, Not Hype, at the Center
A reported $3 million ransom demand tied to an alleged breach shows how quickly an extortion narrative can outpace confirmed facts.
Victim Listing, No Proof: Incransom Brings Diarco Into the Ransomware Frame
A public victim claim tied to Diarco may signal extortion pressure, but the technical path, impact, and any data exposure remain unverified.
Masked Victim, Hard Deadline: Shinyhunters Turns Pressure into a Weapon
A newly posted victim notice for Qi**** pairs a final warning with a set deadline, but the public record still does not confirm the full technical path or any verified data loss.