HEXSENTINEL
Binary & Malware Analyst
Professional Profile
HexSentinel reads machine code as if it were literature. With a background as a reverse engineer in a defense lab, he is among the top analysts of industrial malware and complex worms.
Key Skills
Advanced reverse engineering; Low-level binary analysis; Deobfuscation and unpacking; ICS/SCADA malware behavior analysis; Complex YARA signature development
Major Achievements
Disassembled an ICS malware in 16 hours, tracing it back to the attacker's toolchain.; Discovered the logical bug behind a supply-chain worm affecting NPM repositories.
Articles by HEXSENTINEL
When a Victim Name Hits the Ransomware Board, the Risk Starts Before Proof
Interseguro has been posted in a ransomware-and-extortion context tied to Direwolf, but the public record here remains a listing, not a confirmed breach.
Qilin Publishes a New Victim Claim Involving a Municipal Water Utility
A ransomware listing tied to a public utility is a reminder that extortion claims can create concern fast, even when the full technical picture is still unconfirmed.
N0n Lists a New Victim, But Exposure Remains Unconfirmed
A ransomware-extortion post names "Company #63" in New York, yet the status tag stops short of confirming any breach or data release.
Orova Listing Puts a Malaysian Oil Support Firm in the Ransomware Spotlight
A new victim entry naming Alfameli Group is unverified, but it shows how extortion listings can quickly put service firms under pressure.
Ransomware Listing Puts a Marine Electronics Firm in the Spotlight, but Proof Remains Limited
A new victim name has entered an extortion-related tracker, yet the visible record stops short of confirming breach scope, data theft, or operational disruption.
Qilin Namecheck Lands a Law Firm in the Extortion Spotlight
A new victim entry names Iliff, Meredith, Wildberger & Brennan, P.C., but the listing alone does not prove a breach, theft, or operational disruption.
Sarcoma Listing Centers on a 1.2 TB Claim and an Unnamed USA Victim
A newly posted extortion entry highlights a large alleged leak, but the victim remains unnamed and the file labels do not confirm what was actually taken.
Emperador Victim Post Names CMC AUDITORES SRL
A reported victim post linked to CMC AUDITORES SRL raises the possibility of exposed personnel and client records, while the technical details remain unconfirmed.
Leak Post Pushes Business Files and Care-Adjacent Data Into the Same Extortion Frame
A ransomware listing names MarieBelle New York and claims exposure of accounting, inventory, and telehealth-related records, but the alleged compromise remains unverified.
Healthcare Leak Claim Puts Patient Data and Source Code in the Crosshairs
A Panzer-linked publication claim involving Zenidoc raises concern around sensitive medical records, support material, and development assets, though the alleged contents remain unverified.
Architecture Firm Named in a New Ransomware Claim
A victim listing tied to Panzer has put Valode & Pistre in the ransomware frame, but the available facts stop short of proving compromise.
MSSP Threat Hunting Takes the Spotlight in a Ransomware Briefing
A ransomware-focused piece centers on how managed security providers can strengthen threat hunting, with analysis based on ANY.RUN research and findings.
Play Listing Pushes Another Company Name Into the Ransomware Spotlight
Advanced Imaging Solutions has appeared in a Play-linked victim listing, but the public record still does not confirm a breach, data theft, or any operational impact.
Play’s Latest Victim Tag Turns a Sparse Listing Into a Security Signal
A brief ransomware entry naming The Innovation Group is thin on detail, but it still shows how even a minimal disclosure can trigger operational caution and reputational pressure.
Orova’s latest victim listing names Gatetech Technology
A ransomware-extortion entry tied to Gatetech Technology underscores how a public claim can create uncertainty before any technical facts are verified.
Leak Page Puts BKH ICD in the Crosshairs, but the Damage Is Still Unverified
A victim listing tied to N0n names BKH ICD and flags it as “not paid” and “exposed,” yet the public record does not independently confirm a completed breach.
Extortion Marker Lands on a UK Marine Surveying Firm
A victim listing names BMT IQ, tags it as "NOT PAID" and "EXPOSED," and mentions business records, but the underlying intrusion and any file publication remain unverified here.
Leak Board Pressure Rises After a Logistics Name Lands in an Extortion Listing
A victim entry tied to EUSU Logistics points to a possible ransomware-linked disclosure, but the underlying intrusion and any data exposure remain unverified.
Extortion Listing Puts a Shipping Finance Trail Under the Spotlight
A victim page tied to Dong-A Tanker points to internal financial records, but the underlying intrusion and business impact remain unverified.
Leak-Site Listing Puts Dongkuk Steel Under Extortion Spotlight
A ransomware-style post names the South Korean steel maker and claims invoice and settlement records were exposed, but the underlying breach remains unverified.