HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Warlock’s SharePoint Push Exposes a Thin Edge in Critical Infrastructure
Exploitation of a widely used collaboration platform can become a serious security problem even when the full breach picture is still unclear.
Warlock Ransomware Group Tied to SharePoint Flaws in Reported Campaigns Against Sensitive Sectors
Symantec-linked findings point to targeting of water, telecom, and government organizations, but the full scope of any compromise remains unconfirmed.
Victim Listing Puts Vermont Health Care on Alert, But the Breach Picture Is Still Unclear
A ransomware victim claim can signal extortion pressure, yet it does not by itself confirm stolen data, encryption, or the full scope of any intrusion.
Genesis Listing Puts a Healthcare Provider on the Ransomware Radar
A victim claim involving TLC Perinatal is unverified, but it is enough to raise concern around a healthcare organization without proving a breach.
Victim Listing Leans on Staff and Customer Records in LA PONDEROSA Claim
A ransomware/extortion post tied to Emperador names a Venezuelan poultry business and alleges archives with personnel and customer data, but those claims remain unverified.
Pear’s Latest Victim Tag Points to Software Answers, but the Damage Trail Is Still Thin
A public victim entry names Software Answers, yet the evidence available here does not confirm compromise, data theft, or operational impact.
Payment-Themed Phishing, Malicious ISO Files, and WinMerge in a Global Group Ransomware Run
The campaign shows how routine business formats and trusted utilities can be folded into an encryptor delivery chain without needing exotic tooling.
Leak-Site Claim Puts a Retail Domain in the Extortion Spotlight
A Settra-branded victim entry tied to dfiretailgroup.com raises pressure and privacy concerns, but the alleged data scope remains unverified.
Victim Listing Puts Belgian Aluminium Maker in the Crosshairs, but Proof Is Thin
Thegentlemen has named Corswarem Group as a victim, yet the available material does not confirm breach scope, data theft, or any technical root cause.
Thegentlemen Publishes Don Hierro as a New Victim, But the Impact Remains Unclear
A ransomware victim listing puts the Panama-based engineering firm on alert, yet the available material does not confirm a breach, stolen data, or the scope of any disruption.
Extortion Listing Puts a New Jersey Eye Clinic in the Crosshairs
A ransomware victim post names Northern NJ Eye Institute, but the confirmed record stops at the listing itself and does not prove a breach, theft, or outage.
Victim Listing Turns a Paris Public-Benefits Group into an Extortion Signal
A victim listing attributed by Ransomware.live to Thegentlemen puts Agospap in the spotlight, while the technical reality behind any intrusion remains unverified.
Fresh Victim Claim Puts a Florida Design Firm in the Ransomware Spotlight
Thegentlemen has been linked to a new victim listing for Williamson Dacar Associates, but the public evidence still leaves the technical path and true impact unresolved.
Thegentlemen Lists Custom Rx Shoppe as a New Victim
A ransomware-linked victim entry names the Washington pharmacy, but the technical path, scope, and any data impact remain unconfirmed.
Extortion Post Names Grenoble Printer Europrim, But the Technical Picture Stays Murky
A ransomware listing tied to Thegentlemen places Europrim in the spotlight, yet the available record does not confirm breach scope, data theft, or the route in.
Victim Listing Lands Solaria in an Extortion Spotlight, but Proof Remains Thin
A public ransomware listing can create pressure fast, yet it does not by itself prove intrusion, theft, or operational disruption.
Ransomware Crew Puts Datacomm Services in the Spotlight
A new victim listing linked to TheGentlemen is enough to matter, even while the technical facts behind the claim remain unverified.
Ransomware Listing Puts a Cybersecurity Firm in the Crosshairs
A victim page attributed to Thegentlemen has named DefenceBit, but the public record still leaves the technical path, scope, and downstream impact unconfirmed.
LegalWise Named in a Ransomware Claim, but the Damage Picture Is Still Blank
A public victim listing can raise urgency, yet it does not by itself prove intrusion, data theft, or operational compromise.
Braincipher Listing Puts Wildmanbg.com in the Ransomware Spotlight
A new victim entry has surfaced, but the alleged intrusion, data impact, and scope remain unverified.