HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Payroll Files Under a Microscope: A Victim Listing Names a Construction Group
A ransomware-linked listing attributed to N0n names Xinos Construction Corp and its accounting group, but the alleged exposure remains unverified.
Public Listing Names Texas Surgery Center, but Exposure Is Still Unconfirmed
A new entry tied to N0n flags an unnamed ambulatory surgery center in Texas, yet the available material does not confirm a breach, theft, or operational impact.
Extortion Post Names an Unverified Fintech Target, but the Evidence Stops There
A public victim listing tied to N0n names an unnamed US payments business, yet the claim remains unconfirmed and the exposure tag does not prove a breach.
A Thin Listing, a Loud Signal: N0n Name Appears Beside an Unverified Hospitality Target
A reported victim label has surfaced with a pending-exposure tag, but the available material does not confirm a breach, data theft, or any real-world intrusion.
Leak-Site Namecheck Puts a Massachusetts Nonprofit Under Unverified Ransomware Pressure
A Wallstreet-associated victim listing names Girl Scouts of Eastern Massachusetts, but the incident is not independently confirmed.
When the Fixer Becomes the Flashpoint
An arrest involving a ransomware negotiator raises trust and oversight questions, but the key legal and technical details remain unconfirmed.
Claimed Victim, Unconfirmed Breach: A Public Regional Group Lands in a Ransomware Post
The only verified element here is a claimed victim listing; nothing in the supplied material independently confirms intrusion, theft, or disruption.
Leak-Site Namecheck Raises Alarm, But Proof Still Missing in Saga University Case
A victim listing tied to Thegentlemen has put Saga University in view, yet the available material does not independently confirm a ransomware breach, data theft, or service disruption.
Victim Listing Lands Before Proof in a Case Tied to a Brazilian Security Firm
A new victim label reportedly linked to Suhai Segurança Pessoal raises concern, but the available record still does not confirm a breach, data theft, or operational disruption.
Victim Claim Hits a Law Firm, But the Proof Is Still Missing
A ransomware-victim listing names Martin LLP, yet the available material does not confirm an intrusion, data theft, or operational damage.
Aurora Claims a Data Release Tied to Adams Warehouse & Delivery
Aurora has claimed a data release linked to Adams Warehouse & Delivery, and the described material suggests credential exposure could be one of the more consequential risks, if the files are genuine.
Pear Listing Puts a Niche Infrastructure Supplier in the Ransomware Spotlight
Solar Communications International has been named in a Pear-linked victim listing, but the available material does not independently confirm a breach, data theft, or encryption event.
Victim Label, Real-World Risk: A Prague Law Firm Lands in the Ransomware Spotlight
A victim listing tied to Thegentlemen names Sladek & Partners, but the public record still does not verify a breach, data theft, or operational disruption.
Ransomware Listing, Unverified Incident: Pantanal Agrícola Named by Thegentlemen
A victim listing may point to possible extortion activity, but it does not by itself confirm intrusion, data theft, or operational impact.
Ransomware Listing Flags Globeia Inc. and Its Sensitive Records Workflow
A victim claim tied to a document-processing platform raises operational risk questions, but the available material does not confirm a breach, data theft, or system compromise.
Victim Listing Alone Does Not Prove a Breach at Thai Paper Maker
Thegentlemen has reportedly named C.A.S. Paper Mill as a victim, but the available record still does not confirm a successful intrusion, data theft, or operational impact.
Victim Listing, Unverified Theft: A Small Post Can Still Trigger Big Pressure
North Bridge Venture Partners was listed as a new ransomware victim, while a separate claim of 22.9 GB stolen remains unconfirmed and should be treated as allegation, not proof.
One Victim Listing, Many Unanswered Questions Around Qilin and Via Credit Union
A public ransomware-victim label can spread quickly, but the available material here confirms only a listing, not a verified compromise or data theft.
Victim List, No Proof: Middleby Name-Checked in a Ransomware Feed
A victim listing tied to Iah6477 names Middleby, but the listing alone does not prove a breach, data theft, or operational impact.
Claimed Victim Listing Leaves the Real Incident Question Open
A reported 0x00 victim post tied to bienestarempresarial.mx is a warning sign, but it does not independently confirm a breach, ransomware deployment, or data theft.