HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Extortion Claim Puts a Small Software Firm in the Blast Radius
A ransomware-linked post has named Trifecta Software as a new victim, but the public record still does not confirm the breach path, data loss, or downstream impact.
Victim Post, Real Risk: Why a New Ransomware Listing Still Demands Verification
A victim listing tied to Thegentlemen and Grupo MARSAN has appeared, but the public record does not confirm breach depth, data theft, or operational impact.
Leak Post Puts a Recruitment Firm in the Crosshairs, but the Technical Story Remains Thin
A ransomware-extortion entry naming ANP Health is a reminder that businesses built on identity documents and hiring records can become attractive pressure points, even when the intrusion path is still unknown.
Victim Listing Puts STMicroelectronics in the Spotlight, but the Evidence Trail Is Thin
A fresh extortion-style victim post naming STMicroelectronics has surfaced, yet the available material stops short of proving breach, theft, or operational harm.
Storm Listing Raises the Stakes for an Aerospace Supplier, but the Breach Picture Is Still Fuzzy
A victim label can create immediate pressure, yet it does not by itself confirm encryption, theft, or the full scope of harm.
Fresh Victim Label Puts a Hawaii Clinic Under Ransomware Pressure
A victim listing tied to Wallstreet raises extortion concerns, but the available facts stop short of proving a breach, theft, or disruption.
Everest Lists Reliance Audit, but the Incident Picture Remains Unverified
A new victim post names Reliance Audit, yet the available record stops short of confirming breach scope, data loss, or technical root cause.
Wallstreet Listing Puts an Industrial Supplier in the Ransomware Spotlight
A newly published victim entry names AR Valve Resources, but the public record does not confirm the intrusion path, data loss, or operational scope.
Qilin Names Iberia Compositech Manufacturing in a New Victim Post
A public victim listing is the only confirmed detail so far, and it should be treated as a claim until the underlying incident is independently verified.
Extortion Listing Puts TapClicks Code and Customer Data Under Pressure
A ransom-style post tied to TapClicks claims access to source code, production architecture, and customer data, but those claims remain unverified.
Armada Credit Bureau Lands on Spirals’ Reported Victim List, but the Incident Remains Unverified
A ransomware-extortion listing has named a credit reporting firm, yet the available material does not prove a breach, data theft, or any downstream impact.
Qilin Victim Post Raises Alarm, but the Evidence Stops at the Listing
A new post naming All Tech Machine & Engineering has surfaced, yet the public record does not confirm a breach, theft, or operational impact.
Dao Group Added to Qilin’s Victim Ledger, but the Facts Stop There
A new victim label has surfaced, yet the available material confirms only the listing itself and not any breach, theft, or operational impact.
Public Victim Listing Lands Jones the Grocer in the Ransomware Crosshairs
A new entry tied to Krybit names the Australian food brand, but the available record confirms only a posted victim listing, not a verified breach outcome.
Air Tanzania on a Leak Site: A Threat Claim, Not a Proven Breach
A victim listing can signal extortion pressure, but it does not by itself confirm intrusion, data theft, or wider disruption.
Qilin Listing Puts GDM Pipelines in the Frame, but the Breach Story Is Not Proven
A victim posting dated 2026-09-24 names GDM Pipelines, yet the available record does not confirm a breach, data theft, or downstream disruption.
Victim Label Alone Does Not Prove a Breach, but It Does Raise the Stakes
A Dragonforce-linked victim listing puts Elite Industech Co., Ltd. in the spotlight, while the real incident details remain unconfirmed.
Victim Listing Tied to FRANCARE Puts Ransomware Claims Under a Microscope
A new victim entry linked to FRANCARE Industries shows how extortion claims can surface before any breach detail is verified.
The Encryptor Is Only the Last Move in a Longer Ransomware Play
A narrow focus on the final lockout can hide the earlier stages that make extortion campaigns harder to stop.
Galago Emerges Quietly as a New Ransomware Name, but the Link Question Matters More
A newly identified ransomware operation has surfaced with an apparent connection to Panzer, while its leak portal was inactive when observed.