HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Panzer Lists Asesoría FAR as a New Victim Entry
A ransomware-extortion listing names the Barcelona firm, but the allegation remains unverified and should not be treated as proof of breach.
Victim Listing Triggers Pressure, Not Proof, in FTAPI Case
A new entry tied to Thegentlemen puts FTAPI Software in the extortion spotlight, but the available evidence stops at a public claim, not a verified technical finding.
Extortion Claim Puts Charles & Keith in the Spotlight, but Proof Is Thin
A ransomware-linked listing names the fashion brand as a victim, yet the available record does not confirm a breach, data theft, or the full scope of any incident.
Crystal Glass Enters the Extortion Circuit, but the Real Damage Is Still Unclear
A new victim listing tied to Thegentlemen puts a Leeds glass firm in the ransomware spotlight, yet the technical facts remain thin.
Extortion Note Lands on Brancoptica, and the Signal Matters More Than the Claim
A public victim listing linked to Thegentlemen puts Brancoptica in the ransomware frame, but the technical facts behind the claim remain unconfirmed.
Extortion Claim Puts a Small Software Firm in the Blast Radius
A ransomware-linked post has named Trifecta Software as a new victim, but the public record still does not confirm the breach path, data loss, or downstream impact.
Victim Post, Real Risk: Why a New Ransomware Listing Still Demands Verification
A victim listing tied to Thegentlemen and Grupo MARSAN has appeared, but the public record does not confirm breach depth, data theft, or operational impact.
Leak Post Puts a Recruitment Firm in the Crosshairs, but the Technical Story Remains Thin
A ransomware-extortion entry naming ANP Health is a reminder that businesses built on identity documents and hiring records can become attractive pressure points, even when the intrusion path is still unknown.
Victim Listing Puts STMicroelectronics in the Spotlight, but the Evidence Trail Is Thin
A fresh extortion-style victim post naming STMicroelectronics has surfaced, yet the available material stops short of proving breach, theft, or operational harm.
Storm Listing Raises the Stakes for an Aerospace Supplier, but the Breach Picture Is Still Fuzzy
A victim label can create immediate pressure, yet it does not by itself confirm encryption, theft, or the full scope of harm.
Fresh Victim Label Puts a Hawaii Clinic Under Ransomware Pressure
A victim listing tied to Wallstreet raises extortion concerns, but the available facts stop short of proving a breach, theft, or disruption.
Everest Lists Reliance Audit, but the Incident Picture Remains Unverified
A new victim post names Reliance Audit, yet the available record stops short of confirming breach scope, data loss, or technical root cause.
Wallstreet Listing Puts an Industrial Supplier in the Ransomware Spotlight
A newly published victim entry names AR Valve Resources, but the public record does not confirm the intrusion path, data loss, or operational scope.
Qilin Names Iberia Compositech Manufacturing in a New Victim Post
A public victim listing is the only confirmed detail so far, and it should be treated as a claim until the underlying incident is independently verified.
Extortion Listing Puts TapClicks Code and Customer Data Under Pressure
A ransom-style post tied to TapClicks claims access to source code, production architecture, and customer data, but those claims remain unverified.
Armada Credit Bureau Lands on Spirals’ Reported Victim List, but the Incident Remains Unverified
A ransomware-extortion listing has named a credit reporting firm, yet the available material does not prove a breach, data theft, or any downstream impact.
Qilin Victim Post Raises Alarm, but the Evidence Stops at the Listing
A new post naming All Tech Machine & Engineering has surfaced, yet the public record does not confirm a breach, theft, or operational impact.
Dao Group Added to Qilin’s Victim Ledger, but the Facts Stop There
A new victim label has surfaced, yet the available material confirms only the listing itself and not any breach, theft, or operational impact.
Public Victim Listing Lands Jones the Grocer in the Ransomware Crosshairs
A new entry tied to Krybit names the Australian food brand, but the available record confirms only a posted victim listing, not a verified breach outcome.
Air Tanzania on a Leak Site: A Threat Claim, Not a Proven Breach
A victim listing can signal extortion pressure, but it does not by itself confirm intrusion, data theft, or wider disruption.