HEXSENTINEL
Analyste binaire et malware
Profil professionnel
HexSentinel lit le code machine comme s’il s’agissait de littérature. Fort d’une expérience de reverse engineer dans un laboratoire de défense, il compte parmi les meilleurs analystes de malwares industriels et de vers complexes.
Compétences clés
Reverse engineering avancé; analyse binaire de bas niveau; déobfuscation et unpacking; analyse du comportement des malwares ICS/SCADA; développement de signatures YARA complexes
Réalisations majeures
Désassemblage d’un malware ICS en 16 heures, en retraçant sa chaîne d’outils jusqu’à l’attaquant.; découverte du bug logique derrière un ver de supply chain affectant des dépôts NPM.
Articles de HEXSENTINEL
Ambiguous Victim Name Leaves a Ransomware Claim Hanging in Air
A listing tied to the handle Iah6477 names “Hensley,” but the available material does not verify which entity is meant or whether any incident actually occurred.
Victim Listing Appears Before Proof in Qilin-Linked Commune Du Tampon Case
A newly published victim entry may signal extortion activity, but the available material does not independently confirm a breach, ransomware deployment, or data loss.
One Victim Claim, Many Open Questions: The Hocon Gas Qilin Listing
A ransomware-victim name can intensify pressure fast, but the listing alone does not prove compromise, data theft, or impact.
Extortion Claims Put Maritime Data in the Crosshairs, But the Breach Picture Stays Unclear
A reported n0n campaign against maritime and logistics organizations highlights how port-facing data flows can become leverage points even when exposure is not yet confirmed.
Spacebears Puts an Italian Medical Center on Its Victim List
A reported victim publication involving Alma Center Servizi Medicali S.r.l. highlights how ransomware naming alone can create operational and reputational pressure before any breach is confirmed.
Fresh Victim Listing Puts N0n Back in the Spotlight, but the Evidence Is Still Thin
A new entry tied to a U.S. manufacturing company is marked “pending exposure,” a label that signals pressure without confirming a breach.
Qilin’s New Victim Notice Puts Joliet Schools in the Extortion Spotlight
A published victim notice tied to Joliet Public Schools District 86 highlights how ransomware crews use public exposure as pressure, while the underlying incident details remain unverified.
Another Victim Name Lands in Qilin’s Orbit, But the Real Damage Is Still Unclear
MOA Architecture appears in a victim-disclosure post tied to Qilin, yet the public record does not confirm a breach, data theft, or the wider impact of any incident.
Threats Turn Personal as Ransomware Operators Add AI to the Pressure Playbook
A recent risk report points to a sharper extortion pattern: threats reaching employees’ families and friends, alongside AI appearing in many surveyed attacks.
Leak-Claim Pressure Builds Around an Architecture Firm, with Email and Project Files in the Crosshairs
A new extortion listing names a Florida architecture practice and alleges exposure of email archives, financial records, and project files, but the technical path remains unconfirmed.
One Victim Label, Many Questions: LockBit5 Listing Puts a French Public Body in the Frame
A LockBit5-linked victim entry naming saintpierredescorps.fr appears in a ransomware/extortion context, but the available material does not verify compromise, scope, or data theft.
Ransomware Extortion Is Crossing Into Personal Intimidation
Organizations are reporting threats aimed at employees and families, but the most alarming claims remain hard to verify.
When a Victim Name Hits the Ransomware Board, the Risk Starts Before Proof
Interseguro has been posted in a ransomware-and-extortion context tied to Direwolf, but the public record here remains a listing, not a confirmed breach.
Qilin Publishes a New Victim Claim Involving a Municipal Water Utility
A ransomware listing tied to a public utility is a reminder that extortion claims can create concern fast, even when the full technical picture is still unconfirmed.
N0n Lists a New Victim, But Exposure Remains Unconfirmed
A ransomware-extortion post names "Company #63" in New York, yet the status tag stops short of confirming any breach or data release.
Orova Listing Puts a Malaysian Oil Support Firm in the Ransomware Spotlight
A new victim entry naming Alfameli Group is unverified, but it shows how extortion listings can quickly put service firms under pressure.
Ransomware Listing Puts a Marine Electronics Firm in the Spotlight, but Proof Remains Limited
A new victim name has entered an extortion-related tracker, yet the visible record stops short of confirming breach scope, data theft, or operational disruption.
Qilin Namecheck Lands a Law Firm in the Extortion Spotlight
A new victim entry names Iliff, Meredith, Wildberger & Brennan, P.C., but the listing alone does not prove a breach, theft, or operational disruption.
Sarcoma Listing Centers on a 1.2 TB Claim and an Unnamed USA Victim
A newly posted extortion entry highlights a large alleged leak, but the victim remains unnamed and the file labels do not confirm what was actually taken.
Emperador Victim Post Names CMC AUDITORES SRL
A reported victim post linked to CMC AUDITORES SRL raises the possibility of exposed personnel and client records, while the technical details remain unconfirmed.