HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Leak Deadline Puts a Medical Domain Under Extortion Pressure
A Chaos-linked listing names carolinaasthma.com and claims 290 GB of material could be released within 24 hours, but the alleged disclosure remains unverified.
Keio Group Ransomware Outage Puts Shared Business Systems Under Pressure
Keio Corporation confirmed a ransomware attack on servers within its group, and the resulting outage disrupted certain business systems at affiliated companies.
Akira’s Leak Claim Puts Knit Under Pressure, Not Yet Under Proof
A ransomware post says 175 GB of corporate data is coming soon, but the breach narrative remains unverified and the operational risk is the real signal.
Ransomware Claim Lands on Kidney Care Provider as Patient Data Risk Comes Into Focus
A new victim post tied to Interlock puts a healthcare provider in the spotlight, but the alleged data exposure remains unverified and the operational lesson is broader than one case.
Named in a Claim, Not Yet in Proof: Kellys Home Center Lands in the Pear Spotlight
A victim listing can move faster than verification, leaving defenders to separate reputational noise from a real security event.
Medusalocker Listing Raises the Stakes Around a Small Email Set
A posted victim entry naming ATCO Ltd and claiming 80 extracted emails shows how limited data disclosure can still create outsized security pressure.
PeopleSoft Exposure Draws Fresh Extortion Pressure as UNC6240 Reappears
A renewed campaign around Oracle PeopleSoft highlights how exposed enterprise applications can keep attracting extortion crews when vendor fixes are not fully applied.
Safepay Listing Casts a Shadow Over Bio-Strath Domain
A new victim label tied to bio-strath.com is enough to trigger scrutiny, but the public record does not yet confirm intrusion, encryption, or data theft.
Extortion Post Puts a Healthcare-Linked Domain in the Spotlight
Safepay has named fedelmundo.com.ph as a new victim, but the public record still does not confirm whether the claim reflects a verified intrusion, data theft, or disruption.
Cloud Extortion Claim Puts Tenant Trust Under Pressure
A ransomware listing naming Dediserve Ltd raises a familiar cloud risk: when a provider is targeted, the operational fallout can stretch well beyond a single badge or brand.
Panzer Lists Asesoría FAR as a New Victim Entry
A ransomware-extortion listing names the Barcelona firm, but the allegation remains unverified and should not be treated as proof of breach.
Victim Listing Triggers Pressure, Not Proof, in FTAPI Case
A new entry tied to Thegentlemen puts FTAPI Software in the extortion spotlight, but the available evidence stops at a public claim, not a verified technical finding.
Extortion Claim Puts Charles & Keith in the Spotlight, but Proof Is Thin
A ransomware-linked listing names the fashion brand as a victim, yet the available record does not confirm a breach, data theft, or the full scope of any incident.
Crystal Glass Enters the Extortion Circuit, but the Real Damage Is Still Unclear
A new victim listing tied to Thegentlemen puts a Leeds glass firm in the ransomware spotlight, yet the technical facts remain thin.
Extortion Note Lands on Brancoptica, and the Signal Matters More Than the Claim
A public victim listing linked to Thegentlemen puts Brancoptica in the ransomware frame, but the technical facts behind the claim remain unconfirmed.
Extortion Claim Puts a Small Software Firm in the Blast Radius
A ransomware-linked post has named Trifecta Software as a new victim, but the public record still does not confirm the breach path, data loss, or downstream impact.
Victim Post, Real Risk: Why a New Ransomware Listing Still Demands Verification
A victim listing tied to Thegentlemen and Grupo MARSAN has appeared, but the public record does not confirm breach depth, data theft, or operational impact.
Leak Post Puts a Recruitment Firm in the Crosshairs, but the Technical Story Remains Thin
A ransomware-extortion entry naming ANP Health is a reminder that businesses built on identity documents and hiring records can become attractive pressure points, even when the intrusion path is still unknown.
Victim Listing Puts STMicroelectronics in the Spotlight, but the Evidence Trail Is Thin
A fresh extortion-style victim post naming STMicroelectronics has surfaced, yet the available material stops short of proving breach, theft, or operational harm.
Storm Listing Raises the Stakes for an Aerospace Supplier, but the Breach Picture Is Still Fuzzy
A victim label can create immediate pressure, yet it does not by itself confirm encryption, theft, or the full scope of harm.