HEXSENTINEL
Binary & Malware Analyst
Professional Profile
HexSentinel reads machine code as if it were literature. With a background as a reverse engineer in a defense lab, he is among the top analysts of industrial malware and complex worms.
Key Skills
Advanced reverse engineering; Low-level binary analysis; Deobfuscation and unpacking; ICS/SCADA malware behavior analysis; Complex YARA signature development
Major Achievements
Disassembled an ICS malware in 16 hours, tracing it back to the attacker's toolchain.; Discovered the logical bug behind a supply-chain worm affecting NPM repositories.
Articles by HEXSENTINEL
Sarcoma Listing Centers on a 1.2 TB Claim and an Unnamed USA Victim
A newly posted extortion entry highlights a large alleged leak, but the victim remains unnamed and the file labels do not confirm what was actually taken.
Emperador Victim Post Names CMC AUDITORES SRL
A reported victim post linked to CMC AUDITORES SRL raises the possibility of exposed personnel and client records, while the technical details remain unconfirmed.
Leak Post Pushes Business Files and Care-Adjacent Data Into the Same Extortion Frame
A ransomware listing names MarieBelle New York and claims exposure of accounting, inventory, and telehealth-related records, but the alleged compromise remains unverified.
Healthcare Leak Claim Puts Patient Data and Source Code in the Crosshairs
A Panzer-linked publication claim involving Zenidoc raises concern around sensitive medical records, support material, and development assets, though the alleged contents remain unverified.
Architecture Firm Named in a New Ransomware Claim
A victim listing tied to Panzer has put Valode & Pistre in the ransomware frame, but the available facts stop short of proving compromise.
MSSP Threat Hunting Takes the Spotlight in a Ransomware Briefing
A ransomware-focused piece centers on how managed security providers can strengthen threat hunting, with analysis based on ANY.RUN research and findings.
Play Listing Pushes Another Company Name Into the Ransomware Spotlight
Advanced Imaging Solutions has appeared in a Play-linked victim listing, but the public record still does not confirm a breach, data theft, or any operational impact.
Play’s Latest Victim Tag Turns a Sparse Listing Into a Security Signal
A brief ransomware entry naming The Innovation Group is thin on detail, but it still shows how even a minimal disclosure can trigger operational caution and reputational pressure.
Orova’s latest victim listing names Gatetech Technology
A ransomware-extortion entry tied to Gatetech Technology underscores how a public claim can create uncertainty before any technical facts are verified.
Leak Page Puts BKH ICD in the Crosshairs, but the Damage Is Still Unverified
A victim listing tied to N0n names BKH ICD and flags it as “not paid” and “exposed,” yet the public record does not independently confirm a completed breach.
Extortion Marker Lands on a UK Marine Surveying Firm
A victim listing names BMT IQ, tags it as "NOT PAID" and "EXPOSED," and mentions business records, but the underlying intrusion and any file publication remain unverified here.
Leak Board Pressure Rises After a Logistics Name Lands in an Extortion Listing
A victim entry tied to EUSU Logistics points to a possible ransomware-linked disclosure, but the underlying intrusion and any data exposure remain unverified.
Extortion Listing Puts a Shipping Finance Trail Under the Spotlight
A victim page tied to Dong-A Tanker points to internal financial records, but the underlying intrusion and business impact remain unverified.
Leak-Site Listing Puts Dongkuk Steel Under Extortion Spotlight
A ransomware-style post names the South Korean steel maker and claims invoice and settlement records were exposed, but the underlying breach remains unverified.
Port Community IT Listing Draws Attention to Billing and EDI Data Risk
A victim entry tied to GNCNet / DGT Busan names billing records and operational EDI sample material, but the public record does not establish the full technical path or the true scope of any incident.
Port Community Data Names Surface in a Fresh Ransomware Victim Listing
A posted victim entry tied to GCS Kuwait points to port operations data and EDI archives, but the listing itself does not confirm the full incident path or technical scope.
Port Terminal Leak Claim Puts Logistics Records Under Extortion Pressure
A victim post tied to N0n names a Brazil-based terminal operator and alleges unpaid status, but the file exposure claim remains unverified.
Port Records Put Under Extortion Pressure in a Fresh Victim Listing
A new ransomware-style entry names a Germany-based port consulting firm and points to EDI archives and cargo records, but the underlying breach claim remains unverified.
Logistics Files Put Under Extortion Pressure in New N0n Listing
A ransomware listing attributed to N0n names Yusen Logistics Hong Kong and mentions commercial tariff documentation, but the underlying claim remains unverified.
Port Logistics Files Marked for Exposure in Fresh Extortion Claim
A victim-posting tied to N0n names ZPMC and lists operational EDI archives and cargo loading records, but the compromise itself is not independently confirmed.