HEXSENTINEL
Binary & Malware Analyst
Professional Profile
HexSentinel reads machine code as if it were literature. With a background as a reverse engineer in a defense lab, he is among the top analysts of industrial malware and complex worms.
Key Skills
Advanced reverse engineering; Low-level binary analysis; Deobfuscation and unpacking; ICS/SCADA malware behavior analysis; Complex YARA signature development
Major Achievements
Disassembled an ICS malware in 16 hours, tracing it back to the attacker's toolchain.; Discovered the logical bug behind a supply-chain worm affecting NPM repositories.
Articles by HEXSENTINEL
Leak Board Pressure Rises After a Logistics Name Lands in an Extortion Listing
A victim entry tied to EUSU Logistics points to a possible ransomware-linked disclosure, but the underlying intrusion and any data exposure remain unverified.
Extortion Listing Puts a Shipping Finance Trail Under the Spotlight
A victim page tied to Dong-A Tanker points to internal financial records, but the underlying intrusion and business impact remain unverified.
Leak-Site Listing Puts Dongkuk Steel Under Extortion Spotlight
A ransomware-style post names the South Korean steel maker and claims invoice and settlement records were exposed, but the underlying breach remains unverified.
Port Community IT Listing Draws Attention to Billing and EDI Data Risk
A victim entry tied to GNCNet / DGT Busan names billing records and operational EDI sample material, but the public record does not establish the full technical path or the true scope of any incident.
Port Community Data Names Surface in a Fresh Ransomware Victim Listing
A posted victim entry tied to GCS Kuwait points to port operations data and EDI archives, but the listing itself does not confirm the full incident path or technical scope.
Port Terminal Leak Claim Puts Logistics Records Under Extortion Pressure
A victim post tied to N0n names a Brazil-based terminal operator and alleges unpaid status, but the file exposure claim remains unverified.
Port Records Put Under Extortion Pressure in a Fresh Victim Listing
A new ransomware-style entry names a Germany-based port consulting firm and points to EDI archives and cargo records, but the underlying breach claim remains unverified.
Logistics Files Put Under Extortion Pressure in New N0n Listing
A ransomware listing attributed to N0n names Yusen Logistics Hong Kong and mentions commercial tariff documentation, but the underlying claim remains unverified.
Port Logistics Files Marked for Exposure in Fresh Extortion Claim
A victim-posting tied to N0n names ZPMC and lists operational EDI archives and cargo loading records, but the compromise itself is not independently confirmed.
Maritime Records Turned Into Leverage in a Claimed Extortion Post
A named shipping company has appeared in a ransomware-style leak claim that points to finance and vessel documents, but the technical facts remain unverified.
Ransom Note Hits a Cargo Node as Terminal Data Gets Pulled Into the Spotlight
A ransomware listing tied to Portonave points to exposed terminal databases and EDI archives, but the claim remains unverified and the technical path is still unclear.
Port Terminal Leak Claim Puts Billing Records in the Crosshairs
A newly listed case tied to South Korea port terminal operations centers on claimed exposure of commercial invoices and billing material, while the full technical picture remains unconfirmed.
Healthcare System Lands on an Extortion Board, but the Real Damage Is Still Unclear
A victim listing tied to Metaencryptor places MyMichigan Health in the ransomware spotlight, yet the publicly visible facts stop short of proving a breach, data theft, or outage.
Victim Post Raises Questions for Prodiel After Qilin Publication
A reported Qilin victim listing has put Prodiel in the ransomware spotlight, but the underlying incident details remain unverified.
Victim Listing Sparks Questions, But Proof Still Matters
A new Incransom-linked listing for brookslawfirm.com raises privacy and compliance concerns, yet the available information still stops short of proving a full breach.
Interlock’s Latest Leak Claim Puts a Specialized Contractor in the Spotlight
A new victim entry tied to Interlock suggests a possible data-extortion play against Engineers Contractors Fabricators Inc. (ECF), but the underlying compromise is not independently verified.
Akira Claim on PIC Group Raises the Stakes for Sensitive Project Records
A ransomware post names PIC Group, Inc. and claims 8 GB of corporate data is pending release, but the allegation remains unverified and the breach path is not established.
Nightspire Listing Puts Cognosis Limited in the Spotlight, But Proof Is Still Thin
A fresh victim listing has appeared, yet the public record does not confirm a breach, stolen data, or any operational impact.
Port Terminal Leak Claim Puts Operational Records Under a Threat Lens
A ransomware listing linked to N0n names Pusan Newport Company and points to sensitive terminal records, but the exposure claim is not independently verified.
Port Extortion Post Puts Shipping Records Under a Harsh Spotlight
A victim entry tied to Indonesia’s port logistics sector highlights how manifest and EDI data can become leverage in ransomware-driven pressure campaigns, even while the key claims remain unverified.